{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat AMQ Broker 7.4.3 is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "AMQ Broker is a high-performance messaging implementation based on ActiveMQ Artemis. It uses an asynchronous journal for fast message persistence, and supports multiple languages, protocols, and platforms. \n\nThis release of Red Hat AMQ Broker 7.4.3 serves as a replacement for Red Hat AMQ Broker 7.4.2, and includes security and bug fixes, and enhancements. For further information, refer to the release notes linked to in the References section.\n\nSecurity Fix(es):\n\n* jetty: HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* jetty: HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* jetty: HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* jetty: HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* jetty: HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)\n\n* jetty: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\n* jetty: HTTP/2: flood using empty frames results in excessive resource consumption (CVE-2019-9518)\n\n* netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers (CVE-2019-16869)\n\n* netty: HTTP request smuggling (CVE-2019-20444)\n\n* netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header (CVE-2019-20445)\n\n* netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling (CVE-2020-7238)\n\n* mqtt-client: activemq: Corrupt MQTT frame can cause broker shutdown (CVE-2019-0222)\n\n* jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions (CVE-2019-10241)\n\n* jetty: error path information disclosure (CVE-2019-10247)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2020:1445",
        "url": "https://access.redhat.com/errata/RHSA-2020:1445"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=jboss.amq.broker\u0026version=7.4.3",
        "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=jboss.amq.broker\u0026version=7.4.3"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_amq/7.4/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_amq/7.4/"
      },
      {
        "category": "external",
        "summary": "1696012",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1696012"
      },
      {
        "category": "external",
        "summary": "1705924",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705924"
      },
      {
        "category": "external",
        "summary": "1705993",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705993"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1735745",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
      },
      {
        "category": "external",
        "summary": "1735749",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "external",
        "summary": "1758619",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758619"
      },
      {
        "category": "external",
        "summary": "1796225",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1796225"
      },
      {
        "category": "external",
        "summary": "1798509",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798509"
      },
      {
        "category": "external",
        "summary": "1798524",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798524"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1445.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat AMQ Broker 7.4.3 release and security update",
    "tracking": {
      "current_release_date": "2024-11-05T22:03:48+00:00",
      "generator": {
        "date": "2024-11-05T22:03:48+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2020:1445",
      "initial_release_date": "2020-04-14T13:04:37+00:00",
      "revision_history": [
        {
          "date": "2020-04-14T13:04:37+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-04-14T13:04:37+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T22:03:48+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat AMQ 7.4.3",
                "product": {
                  "name": "Red Hat AMQ 7.4.3",
                  "product_id": "Red Hat AMQ 7.4.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:amq_broker:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss AMQ"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-0222",
      "discovery_date": "2019-03-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1696012"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "activemq: Corrupt MQTT frame can cause broker shutdown",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0222"
        },
        {
          "category": "external",
          "summary": "RHBZ#1696012",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1696012"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0222",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0222"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0222",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0222"
        }
      ],
      "release_date": "2019-03-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "activemq: Corrupt MQTT frame can cause broker shutdown"
    },
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9515",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735745"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735745",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9518",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735749"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using frames with an empty payload, a flood could occur that results in excessive CPU usage and starvation of other clients. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using empty frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735749",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9518",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using empty frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-10241",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2019-04-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1705924"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the versions of jetty which is embedded in the nutch package as shipped with Red Hat Satellite 5. The jetty server is not exposed, as such exploitation is difficult, Red Hat Product Security has rated this issue as having security impact of Low in the context of Red Hat Satellite 5. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10241"
        },
        {
          "category": "external",
          "summary": "RHBZ#1705924",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705924"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10241",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10241"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10241",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10241"
        }
      ],
      "release_date": "2019-04-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions"
    },
    {
      "cve": "CVE-2019-10247",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-04-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1705993"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches the requested path. The default server behavior on jetty-distribution and jetty-home will include at the end of the Handler tree a DefaultHandler, which is responsible for reporting this 404 error, it presents the various configured contexts as HTML for users to click through to. This produced HTML includes output that contains the configured fully qualified directory base resource location for each context.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jetty: error path information disclosure",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the versions of jetty which is embedded in the nutch package as shipped with Red Hat Satellite 5. The jetty server is not exposed, as such exploitation is difficult, Red Hat Product Security has rated this issue as having security impact of Low in the context of Red Hat Satellite 5. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10247"
        },
        {
          "category": "external",
          "summary": "RHBZ#1705993",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705993"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10247",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10247"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10247",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10247"
        }
      ],
      "release_date": "2019-04-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "jetty: error path information disclosure"
    },
    {
      "cve": "CVE-2019-16869",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2019-09-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1758619"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty, where whitespace before the colon in HTTP headers is mishandled. This flaw allows an attacker to cause HTTP request smuggling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that this vulnerability does not poses a substantial practical threat to ElasticSearch 6 [1]. We agree that this issue would be difficult to exploit these vulnerabilities on OpenShift Container Platform, so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships vulnerable netty version embedded in Candlepin, however, is not directly vulnerable since HTTP requests are handled by Tomcat and not netty.\n\n[1]  https://github.com/elastic/elasticsearch/issues/49396",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-16869"
        },
        {
          "category": "external",
          "summary": "RHBZ#1758619",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758619"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-16869",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-16869"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-16869",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16869"
        }
      ],
      "release_date": "2019-09-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers"
    },
    {
      "cve": "CVE-2019-20444",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2020-01-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1798524"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF (carriage return, line feed) without being followed by SP (space) or HTAB (horizontal tab), result in situations where headers can be misread. Data integrity is the highest threat with this vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HTTP request smuggling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that the previous vulnerability, CVE-2019-16869, does not pose a substantial practical threat to ElasticSearch 6. We agree that these issues would be difficult to exploit on OpenShift Container Platform so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships a vulnerable version of netty embedded in Candlepin. However, the flaw can not be triggered in that context, because HTTP requests are handled by Tomcat, not by netty. A future release may fix this.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-20444"
        },
        {
          "category": "external",
          "summary": "RHBZ#1798524",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798524"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20444",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-20444"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20444",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20444"
        },
        {
          "category": "external",
          "summary": "https://github.com/elastic/elasticsearch/issues/49396",
          "url": "https://github.com/elastic/elasticsearch/issues/49396"
        }
      ],
      "release_date": "2020-01-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HTTP request smuggling"
    },
    {
      "cve": "CVE-2019-20445",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2020-01-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1798509"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty before version 4.1.44, where it accepted multiple Content-Length headers and also accepted both Transfer-Encoding, as well as Content-Length headers where it should reject the message under such circumstances. In circumstances where Netty is used in the context of a server, it could result in a viable HTTP smuggling vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that the previous vulnerability, CVE-2019-16869, does not poses a substantial practical threat to ElasticSearch 6 [1]. We agree that this issue would be difficult to exploit both these vulnerabilities on OpenShift Container Platform, so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships a vulnerable version of netty embedded in Candlepin. However, the flaw can not be triggered in that context, because HTTP requests are handled by Tomcat, not by netty. A future release may fix this.\n\n[1]  https://github.com/elastic/elasticsearch/issues/49396",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-20445"
        },
        {
          "category": "external",
          "summary": "RHBZ#1798509",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798509"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20445",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-20445"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20445",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20445"
        }
      ],
      "release_date": "2020-01-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header"
    },
    {
      "cve": "CVE-2020-7238",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2020-01-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1796225"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty, where it mishandles Transfer-Encoding whitespace. This flaw allows HTTP Request Smuggling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that the previous vulnerability, CVE-2019-16869, does not poses a substantial practical threat to ElasticSearch 6 [1]. We agree that this issue would be difficult to exploit both these vulnerabilities on OpenShift Container Platform, so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships vulnerable netty version embedded in Candlepin, however, is not directly vulnerable since HTTP requests are handled by Tomcat and not netty.\n\n[1]  https://github.com/elastic/elasticsearch/issues/49396",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-7238"
        },
        {
          "category": "external",
          "summary": "RHBZ#1796225",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1796225"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-7238",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-7238"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7238",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7238"
        },
        {
          "category": "external",
          "summary": "https://netty.io/news/2019/12/18/4-1-44-Final.html",
          "url": "https://netty.io/news/2019/12/18/4-1-44-Final.html"
        }
      ],
      "release_date": "2020-01-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A security update is now available for Red Hat JBoss Enterprise Application Platform 7.1 for Red Hat Enterprise Linux 7.\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.1.7 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.6, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.1.7 Release Notes for information about the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* undertow: EAP: field-name is not parsed in accordance to RFC7230 [eap-7.1.z] (CVE-2020-1710)\n\n* commons-beanutils: apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default [eap-7.1.z] (CVE-2019-10086)\n\n* log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink [eap-7.1.z] (CVE-2022-23302)\n\n* jackson-databind: default typing mishandling leading to remote code execution [eap-7.1.z] (CVE-2019-14379)\n\n* undertow: HTTP/2: flood using HEADERS frames results in unbounded memory growth [eap-7.1.z] (CVE-2019-9514)\n\n* undertow: AJP File Read/Inclusion Vulnerability [eap-7.1.z] (CVE-2020-1745)\n\n* undertow: HTTP/2: large amount of data requests leads to denial of service [eap-7.1.z] (CVE-2019-9511)\n\n* undertow: servletPath in normalized incorrectly leading to dangerous application mapping which could result in security bypass [eap-7.1.z] (CVE-2020-1757)\n\n* undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS [eap-7.1.z] (CVE-2019-14888)\n\n* log4j: Unsafe deserialization flaw in Chainsaw log viewer [eap-7.1.z] (CVE-2022-23307)\n\n* netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header [eap-7.1.z] (CVE-2019-20445)\n\n* log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender [eap-7.1.z] (CVE-2021-4104)\n\n* undertow: HTTP/2: flood using SETTINGS frames results in unbounded memory growth [eap-7.1.z] (CVE-2019-9515)\n\n* infinispan-core: infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods [eap-7.1.z] (CVE-2019-10174)\n\n* log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender [eap-7.1.z] (CVE-2022-23305)\n\n* jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution [eap-7.1.z] (CVE-2019-12384)\n\n* wildfly-security-manager: security manager authorization bypass (CVE-2019-14843)\n\n* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers (CVE-2019-16869)\n\n* jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* (CVE-2019-17531)\n\n* netty: HTTP request smuggling (CVE-2019-20444)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:5856",
        "url": "https://access.redhat.com/errata/RHSA-2024:5856"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1",
        "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/index"
      },
      {
        "category": "external",
        "summary": "1703469",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1703469"
      },
      {
        "category": "external",
        "summary": "1725807",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1725807"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1735745",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
      },
      {
        "category": "external",
        "summary": "1737517",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737517"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1752770",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752770"
      },
      {
        "category": "external",
        "summary": "1752980",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752980"
      },
      {
        "category": "external",
        "summary": "1758619",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758619"
      },
      {
        "category": "external",
        "summary": "1767483",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1767483"
      },
      {
        "category": "external",
        "summary": "1772464",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1772464"
      },
      {
        "category": "external",
        "summary": "1775293",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1775293"
      },
      {
        "category": "external",
        "summary": "1793970",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793970"
      },
      {
        "category": "external",
        "summary": "1798509",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798509"
      },
      {
        "category": "external",
        "summary": "1798524",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798524"
      },
      {
        "category": "external",
        "summary": "1807305",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1807305"
      },
      {
        "category": "external",
        "summary": "2031667",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2031667"
      },
      {
        "category": "external",
        "summary": "2041949",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2041949"
      },
      {
        "category": "external",
        "summary": "2041959",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2041959"
      },
      {
        "category": "external",
        "summary": "2041967",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2041967"
      },
      {
        "category": "external",
        "summary": "JBEAP-24826",
        "url": "https://issues.redhat.com/browse/JBEAP-24826"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5856.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.7 on RHEL 7 security update",
    "tracking": {
      "current_release_date": "2024-11-06T06:46:28+00:00",
      "generator": {
        "date": "2024-11-06T06:46:28+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2024:5856",
      "initial_release_date": "2024-08-26T11:05:47+00:00",
      "revision_history": [
        {
          "date": "2024-08-26T11:05:47+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-08-26T11:05:47+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-06T06:46:28+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
                "product": {
                  "name": "Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
                  "product_id": "7Server-JBEAP-7.1-EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Enterprise Application Platform"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
                "product": {
                  "name": "eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
                  "product_id": "eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-undertow@1.4.18-12.SP12_redhat_00001.1.ep7.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
                "product": {
                  "name": "eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
                  "product_id": "eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-netty@4.1.45-1.Final_redhat_00001.1.ep7.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
                "product": {
                  "name": "eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
                  "product_id": "eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-elytron@1.1.13-1.Final_redhat_00001.1.ep7.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
                "product": {
                  "name": "eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
                  "product_id": "eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-commons-beanutils@1.9.4-1.redhat_00002.1.ep7.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
                "product": {
                  "name": "eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
                  "product_id": "eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-infinispan@8.2.11-1.SP2_redhat_00001.1.ep7.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
                "product": {
                  "name": "eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
                  "product_id": "eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jackson-databind@2.8.11.5-1.redhat_00001.1.ep7.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
                "product": {
                  "name": "eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
                  "product_id": "eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-log4j-jboss-logmanager@1.2.2-1.Final_redhat_00002.1.ep7.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
                "product": {
                  "name": "eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
                  "product_id": "eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly@7.1.7-2.GA_redhat_00002.1.ep7.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
                "product": {
                  "name": "eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
                  "product_id": "eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-undertow@1.4.18-12.SP12_redhat_00001.1.ep7.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
                "product": {
                  "name": "eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
                  "product_id": "eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-netty@4.1.45-1.Final_redhat_00001.1.ep7.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
                "product": {
                  "name": "eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
                  "product_id": "eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-netty-all@4.1.45-1.Final_redhat_00001.1.ep7.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
                "product": {
                  "name": "eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
                  "product_id": "eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-elytron@1.1.13-1.Final_redhat_00001.1.ep7.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
                "product": {
                  "name": "eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
                  "product_id": "eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-commons-beanutils@1.9.4-1.redhat_00002.1.ep7.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
                "product": {
                  "name": "eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
                  "product_id": "eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-infinispan@8.2.11-1.SP2_redhat_00001.1.ep7.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
                "product": {
                  "name": "eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
                  "product_id": "eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-infinispan-cachestore-jdbc@8.2.11-1.SP2_redhat_00001.1.ep7.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
                "product": {
                  "name": "eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
                  "product_id": "eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-infinispan-cachestore-remote@8.2.11-1.SP2_redhat_00001.1.ep7.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
                "product": {
                  "name": "eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
                  "product_id": "eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-infinispan-client-hotrod@8.2.11-1.SP2_redhat_00001.1.ep7.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
                "product": {
                  "name": "eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
                  "product_id": "eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-infinispan-commons@8.2.11-1.SP2_redhat_00001.1.ep7.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
                "product": {
                  "name": "eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
                  "product_id": "eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-infinispan-core@8.2.11-1.SP2_redhat_00001.1.ep7.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
                "product": {
                  "name": "eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
                  "product_id": "eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jackson-databind@2.8.11.5-1.redhat_00001.1.ep7.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
                "product": {
                  "name": "eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
                  "product_id": "eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-log4j-jboss-logmanager@1.2.2-1.Final_redhat_00002.1.ep7.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
                "product": {
                  "name": "eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
                  "product_id": "eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly@7.1.7-2.GA_redhat_00002.1.ep7.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
                "product": {
                  "name": "eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
                  "product_id": "eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-modules@7.1.7-2.GA_redhat_00002.1.ep7.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch"
        },
        "product_reference": "eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src"
        },
        "product_reference": "eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch"
        },
        "product_reference": "eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src"
        },
        "product_reference": "eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch"
        },
        "product_reference": "eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch"
        },
        "product_reference": "eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch"
        },
        "product_reference": "eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch"
        },
        "product_reference": "eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch"
        },
        "product_reference": "eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch"
        },
        "product_reference": "eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src"
        },
        "product_reference": "eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch"
        },
        "product_reference": "eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src"
        },
        "product_reference": "eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch"
        },
        "product_reference": "eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src"
        },
        "product_reference": "eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch"
        },
        "product_reference": "eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch"
        },
        "product_reference": "eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src"
        },
        "product_reference": "eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        },
        "product_reference": "eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src"
        },
        "product_reference": "eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch"
        },
        "product_reference": "eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src"
        },
        "product_reference": "eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        },
        "product_reference": "eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.1-EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9515",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735745"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735745",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth"
    },
    {
      "cve": "CVE-2019-10086",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2019-10-31T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1767483"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Apache Commons BeanUtils, where the class property in PropertyUtilsBean is not suppressed by default. This flaw allows an attacker to access the classloader.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src"
        ],
        "known_not_affected": [
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10086"
        },
        {
          "category": "external",
          "summary": "RHBZ#1767483",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1767483"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10086",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10086"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10086",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10086"
        },
        {
          "category": "external",
          "summary": "https://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.4/RELEASE-NOTES.txt",
          "url": "https://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.4/RELEASE-NOTES.txt"
        }
      ],
      "release_date": "2019-08-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        },
        {
          "category": "workaround",
          "details": "There is no currently known mitigation for this flaw.",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default"
    },
    {
      "cve": "CVE-2019-10174",
      "cwe": {
        "id": "CWE-470",
        "name": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)"
      },
      "discovery_date": "2018-10-25T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1703469"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any class with Infinispan\u0027s privileges. The attacker can use reflection to introduce new, malicious behavior into the application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform\u0027s OpenDaylight contains the vulnerable library. This library is a requirement of other dependencies (Karaf and Hibernate). Under supported deployments, the vulnerable functionality is not utilized. Based on this, no OpenDaylight versions will not be fixed.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch"
        ],
        "known_not_affected": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10174"
        },
        {
          "category": "external",
          "summary": "RHBZ#1703469",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1703469"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10174",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10174"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10174",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10174"
        }
      ],
      "release_date": "2019-11-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        },
        {
          "category": "workaround",
          "details": "There is no known mitigation for this issue.",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods"
    },
    {
      "cve": "CVE-2019-12384",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2019-06-25T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1725807"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was discovered in FasterXML jackson-databind in versions prior to 2.9.9. The vulnerability would permit polymorphic deserialization of malicious objects using the logback-core gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. Depending on the classpath content, remote code execution may be possible.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack\u0027s OpenDaylight does not use logback in any supported configuration. Therefore, the prerequisites for this vulnerability are not present and OpenDaylight is not affected.\n\nThis vulnerability relies on logback-core (ch.qos.logback.core) being present in the application\u0027s ClassPath. Logback-core is not packaged as an RPM for Red Hat Enterprise Linux or Red Hat Software Collections. Applications using jackson-databind that do not also use logback-core are not impacted by this vulnerability.\n\nThis issue affects the versions of jackson-databind bundled with candlepin as shipped with Red Hat Satellite 6.x. However the affected code is NOT used at this time.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src"
        ],
        "known_not_affected": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-12384"
        },
        {
          "category": "external",
          "summary": "RHBZ#1725807",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1725807"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-12384",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-12384"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12384",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12384"
        }
      ],
      "release_date": "2019-06-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution"
    },
    {
      "cve": "CVE-2019-14379",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2019-07-29T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1737517"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was discovered in FasterXML jackson-databind, where it would permit polymorphic deserialization of malicious objects using the ehcache and logback JNDI gadgets when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: default typing mishandling leading to remote code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nSimilarly, Satellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src"
        ],
        "known_not_affected": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14379"
        },
        {
          "category": "external",
          "summary": "RHBZ#1737517",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737517"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14379",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14379"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14379",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14379"
        }
      ],
      "release_date": "2019-07-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: default typing mishandling leading to remote code execution"
    },
    {
      "cve": "CVE-2019-14843",
      "cwe": {
        "id": "CWE-592",
        "name": "CWE-592"
      },
      "discovery_date": "2019-09-17T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1752980"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly-security-manager: security manager authorization bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ],
        "known_not_affected": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14843"
        },
        {
          "category": "external",
          "summary": "RHBZ#1752980",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752980"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14843",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14843"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14843",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14843"
        }
      ],
      "release_date": "2019-09-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        },
        {
          "category": "workaround",
          "details": "This flaw only affects the Security Manager running under JDK 11 or 8. To mitigate exposure to this flaw, do not run under those JDK versions.",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "wildfly-security-manager: security manager authorization bypass"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Henning Baldersheim",
            "H\u00e5vard Pettersen"
          ],
          "organization": "Verizon Media"
        }
      ],
      "cve": "CVE-2019-14888",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-10-25T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1772464"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in the Undertow HTTP server listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service (DOS) to make the service unavailable on SSL.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src"
        ],
        "known_not_affected": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14888"
        },
        {
          "category": "external",
          "summary": "RHBZ#1772464",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1772464"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14888",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14888"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14888",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14888"
        }
      ],
      "release_date": "2020-01-20T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        },
        {
          "category": "workaround",
          "details": "Enable HTTP2 (enable-http2=\"true\") in the undertow\u0027s HTTPS settings.",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS"
    },
    {
      "cve": "CVE-2019-16869",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2019-09-26T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1758619"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty, where whitespace before the colon in HTTP headers is mishandled. This flaw allows an attacker to cause HTTP request smuggling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that this vulnerability does not poses a substantial practical threat to ElasticSearch 6 [1]. We agree that this issue would be difficult to exploit these vulnerabilities on OpenShift Container Platform, so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships vulnerable netty version embedded in Candlepin, however, is not directly vulnerable since HTTP requests are handled by Tomcat and not netty.\n\n[1]  https://github.com/elastic/elasticsearch/issues/49396",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch"
        ],
        "known_not_affected": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-16869"
        },
        {
          "category": "external",
          "summary": "RHBZ#1758619",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758619"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-16869",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-16869"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-16869",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16869"
        }
      ],
      "release_date": "2019-09-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers"
    },
    {
      "cve": "CVE-2019-17531",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2019-11-21T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1775293"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Satellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenShift Container Platform does ship the vulnerable component, but does not enable the unsafe conditions needed to exploit, lowering their vulnerability impact.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src"
        ],
        "known_not_affected": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-17531"
        },
        {
          "category": "external",
          "summary": "RHBZ#1775293",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1775293"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-17531",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-17531"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17531",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17531"
        }
      ],
      "release_date": "2019-10-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*"
    },
    {
      "cve": "CVE-2019-20444",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2020-01-30T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1798524"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF (carriage return, line feed) without being followed by SP (space) or HTAB (horizontal tab), result in situations where headers can be misread. Data integrity is the highest threat with this vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HTTP request smuggling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that the previous vulnerability, CVE-2019-16869, does not pose a substantial practical threat to ElasticSearch 6. We agree that these issues would be difficult to exploit on OpenShift Container Platform so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships a vulnerable version of netty embedded in Candlepin. However, the flaw can not be triggered in that context, because HTTP requests are handled by Tomcat, not by netty. A future release may fix this.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch"
        ],
        "known_not_affected": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-20444"
        },
        {
          "category": "external",
          "summary": "RHBZ#1798524",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798524"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20444",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-20444"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20444",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20444"
        },
        {
          "category": "external",
          "summary": "https://github.com/elastic/elasticsearch/issues/49396",
          "url": "https://github.com/elastic/elasticsearch/issues/49396"
        }
      ],
      "release_date": "2020-01-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HTTP request smuggling"
    },
    {
      "cve": "CVE-2019-20445",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2020-01-20T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1798509"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty before version 4.1.44, where it accepted multiple Content-Length headers and also accepted both Transfer-Encoding, as well as Content-Length headers where it should reject the message under such circumstances. In circumstances where Netty is used in the context of a server, it could result in a viable HTTP smuggling vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that the previous vulnerability, CVE-2019-16869, does not poses a substantial practical threat to ElasticSearch 6 [1]. We agree that this issue would be difficult to exploit both these vulnerabilities on OpenShift Container Platform, so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships a vulnerable version of netty embedded in Candlepin. However, the flaw can not be triggered in that context, because HTTP requests are handled by Tomcat, not by netty. A future release may fix this.\n\n[1]  https://github.com/elastic/elasticsearch/issues/49396",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch"
        ],
        "known_not_affected": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-20445"
        },
        {
          "category": "external",
          "summary": "RHBZ#1798509",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798509"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20445",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-20445"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20445",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20445"
        }
      ],
      "release_date": "2020-01-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header"
    },
    {
      "cve": "CVE-2020-1710",
      "cwe": {
        "id": "CWE-113",
        "name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
      },
      "discovery_date": "2019-12-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1793970"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was discovered in JBoss EAP, where it does not process the header field-name in accordance with RFC7230. Whitespace between the header field-name and colon is processed, resulting in an HTTP response code of 200 instead of a bad request of 400.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "EAP: field-name is not parsed in accordance to RFC7230",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-1710"
        },
        {
          "category": "external",
          "summary": "RHBZ#1793970",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793970"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1710",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-1710"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1710",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1710"
        }
      ],
      "release_date": "2020-08-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        },
        {
          "category": "workaround",
          "details": "There is currently no known mitigation for this issue.",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "EAP: field-name is not parsed in accordance to RFC7230"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Steve Zapantis",
            "Robert Roberson",
            "taktakdb4g"
          ]
        }
      ],
      "cve": "CVE-2020-1745",
      "cwe": {
        "id": "CWE-285",
        "name": "Improper Authorization"
      },
      "discovery_date": "2020-02-24T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1807305"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "undertow: AJP File Read/Inclusion Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Please refer to the Red Hat knowledgebase article: https://access.redhat.com/solutions/4851251 and CVE page https://access.redhat.com/security/cve/cve-2020-1938",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src"
        ],
        "known_not_affected": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-1745"
        },
        {
          "category": "external",
          "summary": "RHBZ#1807305",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1807305"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1745",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-1745"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1745",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1745"
        },
        {
          "category": "external",
          "summary": "https://meterpreter.org/cve-2020-1938-apache-tomcat-ajp-connector-remote-code-execution-vulnerability-alert/",
          "url": "https://meterpreter.org/cve-2020-1938-apache-tomcat-ajp-connector-remote-code-execution-vulnerability-alert/"
        },
        {
          "category": "external",
          "summary": "https://www.cnvd.org.cn/webinfo/show/5415",
          "url": "https://www.cnvd.org.cn/webinfo/show/5415"
        },
        {
          "category": "external",
          "summary": "https://www.tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487",
          "url": "https://www.tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487"
        }
      ],
      "release_date": "2020-02-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        },
        {
          "category": "workaround",
          "details": "Please refer to the Red Hat knowledgebase article: https://access.redhat.com/solutions/4851251",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "undertow: AJP File Read/Inclusion Vulnerability"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Fedorov Oleksii",
            "Keitaro Yamazaki",
            "Shiga Ryota"
          ],
          "organization": "LINE Corporation"
        }
      ],
      "cve": "CVE-2020-1757",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-09-09T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1752770"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Undertow, where the servlet container causes the servletPath to normalize incorrectly by truncating the path after the semicolon. The flaw may lead to application mapping, resulting in a security bypass.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "undertow: servletPath is normalized incorrectly leading to dangerous application mapping which could result in security bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src"
        ],
        "known_not_affected": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-1757"
        },
        {
          "category": "external",
          "summary": "RHBZ#1752770",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752770"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1757",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-1757"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1757",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1757"
        }
      ],
      "release_date": "2018-12-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        },
        {
          "category": "workaround",
          "details": "The issue can be mitigated by configuring UrlPathHelper to ignore the servletPath via setting \"alwaysUseFullPath\".",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "undertow: servletPath is normalized incorrectly leading to dangerous application mapping which could result in security bypass"
    },
    {
      "cve": "CVE-2021-4104",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2021-12-13T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2031667"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Java logging library Apache Log4j in version 1.x. JMSAppender in Log4j 1.x is vulnerable to deserialization of untrusted data. This allows a remote attacker to execute code on the server if the deployed application is configured to use JMSAppender and to the attacker\u0027s JNDI LDAP endpoint.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Based on the conditions to be exploitable (see details below), the risk is much lower than Log4j 2.x and Red Hat has assessed this to be Moderate severity. This flaw has been filed for Log4j 1.x, and the corresponding flaw information for Log4j 2.x is available at: https://access.redhat.com/security/cve/CVE-2021-44228\n\nNote this flaw ONLY affects applications which are specifically configured to use JMSAppender, which is not the default, or when the attacker has write access to the Log4j configuration for adding JMSAppender to the attacker\u0027s JNDI LDAP endpoint. \n\nIf the Log4j configuration is set TopicBindingName or TopicConnectionFactoryBindingName configurations allowing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228 Log4j 2.x, Log4j 1.x is vulnerable. However, the attack vector is reduced as it depends on having write access, which is not a standard configuration rather than untrusted user input. These are sufficient factors beyond the attacker\u0027s control.\n\nThe tomcat package shipped with Red Hat Enterprise Linux does not include log4j but it does include a default configuration for log4j, log4j.properties, which could be used with tomcat if users choose to install and configure the library. The JMSAppender is not enabled by default, and the permissions of the file can only be modified as root.\n\nRed Hat Virtualization ships log4j12-1.2.17, but it is used and configured in a way which makes this flaw not possible to exploit. Therefore impact is rated Low.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src"
        ],
        "known_not_affected": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-4104"
        },
        {
          "category": "external",
          "summary": "RHBZ#2031667",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2031667"
        },
        {
          "category": "external",
          "summary": "RHSB-2021-009",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2021-009"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-4104",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-4104"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-4104",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-4104"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/logging-log4j2/pull/608#issuecomment-990494126",
          "url": "https://github.com/apache/logging-log4j2/pull/608#issuecomment-990494126"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/logging-log4j2/pull/608#issuecomment-991723301",
          "url": "https://github.com/apache/logging-log4j2/pull/608#issuecomment-991723301"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/0x4zvtq92yggdgvwfgsftqrj4xx5w0nx",
          "url": "https://lists.apache.org/thread/0x4zvtq92yggdgvwfgsftqrj4xx5w0nx"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2021/12/13/1",
          "url": "https://www.openwall.com/lists/oss-security/2021/12/13/1"
        }
      ],
      "release_date": "2021-12-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        },
        {
          "category": "workaround",
          "details": "These are the possible mitigations for this flaw for releases version 1.x:\n\n- Comment out or remove JMSAppender in the Log4j configuration if it is used\n- Remove the JMSAppender class from the classpath. For example:\n```\nzip -q -d log4j-*.jar org/apache/log4j/net/JMSAppender.class\n```\n- Restrict access for the OS user on the platform running the application to prevent modifying the Log4j configuration by the attacker.",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender"
    },
    {
      "cve": "CVE-2022-23302",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2022-01-18T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2041949"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Java logging library Apache Log4j in version 1.x. JMSSink in Log4j 1.x is vulnerable to deserialization of untrusted data. This allows a remote attacker to execute code on the server if JMSSink is deployed and has been configured to perform JNDI requests.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Note this flaw ONLY affects applications which are specifically configured to use JMSSink, which is not the default, or when the attacker has write access to the Log4j configuration for adding JMSSink to the attacker\u0027s JNDI LDAP endpoint.\n\nRed Hat Satellite bundles log4j-over-slf4j with Candlepin, however, product is not affected as it uses logback framework for logging.\n\nRed Hat Virtualization and OpenShift Container Platform in the OCP Metering stack (the Hive/Presto/Hadoop components) ship a vulnerable version of the log4j package, however JMSSink is not used. Therefore the impact of this vulnerability for these products is rated Low.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src"
        ],
        "known_not_affected": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-23302"
        },
        {
          "category": "external",
          "summary": "RHBZ#2041949",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2041949"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-23302",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-23302"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-23302",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-23302"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2022/01/18/3",
          "url": "https://www.openwall.com/lists/oss-security/2022/01/18/3"
        }
      ],
      "release_date": "2022-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        },
        {
          "category": "workaround",
          "details": "These are the possible mitigations for this flaw for releases version 1.x:\n\n- Comment out or remove JMSSink in the Log4j configuration if it is used\n- Remove the JMSSink class from the server\u0027s jar files. For example:\n```\nzip -q -d log4j-*.jar org/apache/log4j/net/JMSSink.class\n```\n- Restrict access for the OS user on the platform running the application to prevent modifying the Log4j configuration by the attacker.",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink"
    },
    {
      "cve": "CVE-2022-23305",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
      },
      "discovery_date": "2022-01-18T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2041959"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Java logging library Apache Log4j in version 1.x. JDBCAppender in Log4j 1.x is vulnerable to SQL injection in untrusted data. This allows a remote attacker to run SQL statements in the database if the deployed application is configured to use JDBCAppender with certain interpolation tokens.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Note this issue only affects Log4j 1.x when specifically configured to use the JDBCAppender, which is not the default.\n\nRed Hat Satellite bundles log4j-over-slf4j with Candlepin, however, product is not affected as it uses logback framework for logging.\n\nRed Hat Virtualization and OpenShift Container Platform in the OCP Metering stack (the Hive/Presto/Hadoop components) ship a vulnerable version of the log4j package, however JDBCAppender is not used. Therefore the impact of this vulnerability for these products is rated Low.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src"
        ],
        "known_not_affected": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-23305"
        },
        {
          "category": "external",
          "summary": "RHBZ#2041959",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2041959"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-23305",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-23305"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-23305",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-23305"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2022/01/18/4",
          "url": "https://www.openwall.com/lists/oss-security/2022/01/18/4"
        }
      ],
      "release_date": "2022-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        },
        {
          "category": "workaround",
          "details": "These are the possible mitigations for this flaw for releases version 1.x:\n\n- Comment out or remove JDBCAppender in the Log4j configuration if it is used\n- Remove the JDBCAppender class from the server\u0027s jar files. For example:\n```\nzip -q -d log4j-*.jar org/apache/log4j/jdbc/JDBCAppender.class\n```",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender"
    },
    {
      "cve": "CVE-2022-23307",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2022-01-18T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2041967"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the log4j 1.x chainsaw component, where the contents of certain log entries are deserialized and possibly permit code execution. This flaw allows an attacker to send a malicious request with serialized data to the server to be deserialized when the chainsaw component is run.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "log4j: Unsafe deserialization flaw in Chainsaw log viewer",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Chainsaw is a standalone graphical user interface for viewing log entries in log4j. This flaw may be bypassed by using other available means to access log entries.\n\nRed Hat Satellite bundles log4j-over-slf4j with Candlepin, however, product is not affected as it uses logback framework for logging.\n\nRed Hat Virtualization ships a vulnerable version of the log4j package, however chainsaw is not part of typical use cases. An attacker looking to exploit this would need to not only be able to generate a malicious log entry, but also have the necessary access and permissions to start chainsaw on the engine node. Therefore the impact of this vulnerability for Red Hat Virtualization is rated Low.\n\nSimilar to Red Hat Virtualization in OpenShift Container Platform (OCP), the Hive/Presto/Hadoop components that comprise the OCP Metering stack, ship the vulnerable version of log4j package, however vulnerable chainsaw component is not used by default. Therefore the impact to OCP is reduced to Low.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src"
        ],
        "known_not_affected": [
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
          "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-23307"
        },
        {
          "category": "external",
          "summary": "RHBZ#2041967",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2041967"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-23307",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-23307"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-23307",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-23307"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2022/01/18/5",
          "url": "https://www.openwall.com/lists/oss-security/2022/01/18/5"
        }
      ],
      "release_date": "2022-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-26T11:05:47+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:5856"
        },
        {
          "category": "workaround",
          "details": "These are the mitigations available for this flaw for log4j 1.x:\n- Avoid using Chainsaw to view logs, and instead use some other utility, especially if there is a log view available within the product itself.\n- Remove the Chainsaw classes from the log4j jar files. For example:\n```\nzip -q -d log4j-*.jar org/apache/log4j/chainsaw/*\n```\n(log4j jars may be nested in zip archives within product)",
          "product_ids": [
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-apache-commons-beanutils-0:1.9.4-1.redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-jdbc-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-cachestore-remote-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-client-hotrod-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-commons-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-infinispan-core-0:8.2.11-1.SP2_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-jackson-databind-0:2.8.11.5-1.redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-netty-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-netty-all-0:4.1.45-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-undertow-0:1.4.18-12.SP12_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-elytron-0:1.1.13-1.Final_redhat_00001.1.ep7.el7.src",
            "7Server-JBEAP-7.1-EUS:eap7-wildfly-modules-0:7.1.7-2.GA_redhat_00002.1.ep7.el7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.noarch",
            "7Server-JBEAP-7.1-EUS:eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "log4j: Unsafe deserialization flaw in Chainsaw log viewer"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "This is a security update for JBoss EAP Continuous Delivery 18.0.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Enterprise Application Platform CD18 is a platform for Java applications based on the WildFly application runtime.\n\nThis release of Red Hat JBoss Enterprise Application Platform CD18 includes bug fixes and enhancements. \n\nSecurity Fix(es):\n\n* jackson-databind: Serialization gadgets in org.springframework:spring-aop (CVE-2020-11619)\n* jackson-databind: Serialization gadgets in commons-jelly:commons-jelly (CVE-2020-11620)\n* wildfly: Race condition on PID file allows for termination of arbitrary processes by local users (CVE-2019-3805)\n* undertow: HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n* undertow: HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n* undertow: HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n* undertow: HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n* wildfly-core: Incorrect privileges for \u0027Monitor\u0027, \u0027Auditor\u0027 and \u0027Deployer\u0027 user by default (CVE-2019-14838)\n* undertow: Memory Leak in Undertow HttpOpenListener due to holding remoting connections indefinitely (CVE-2019-19343)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2020:2565",
        "url": "https://access.redhat.com/errata/RHSA-2020:2565"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1660263",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1660263"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1735745",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1751227",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1751227"
      },
      {
        "category": "external",
        "summary": "1780445",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1780445"
      },
      {
        "category": "external",
        "summary": "1826798",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826798"
      },
      {
        "category": "external",
        "summary": "1826805",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826805"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2565.json"
      }
    ],
    "title": "Red Hat Security Advisory: EAP Continuous Delivery Technical Preview Release 18 security update",
    "tracking": {
      "current_release_date": "2024-11-05T22:20:37+00:00",
      "generator": {
        "date": "2024-11-05T22:20:37+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2020:2565",
      "initial_release_date": "2020-06-15T16:17:24+00:00",
      "revision_history": [
        {
          "date": "2020-06-15T16:17:24+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-06-15T16:17:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T22:20:37+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Enterprise Application Platform Continuous Delivery",
                "product": {
                  "name": "Red Hat JBoss Enterprise Application Platform Continuous Delivery",
                  "product_id": "Red Hat JBoss Enterprise Application Platform Continuous Delivery",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform_cd:18"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Enterprise Application Platform"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Daniel Le Gall"
          ],
          "organization": "SCRT Information Security"
        }
      ],
      "cve": "CVE-2019-3805",
      "cwe": {
        "id": "CWE-364",
        "name": "Signal Handler Race Condition"
      },
      "discovery_date": "2018-11-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1660263"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was discovered in wildfly that would allow local users, who are able to execute init.d script, to terminate arbitrary processes on the system. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate any process as root.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly: Race condition on PID file allows for termination of arbitrary processes by local users",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-3805"
        },
        {
          "category": "external",
          "summary": "RHBZ#1660263",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1660263"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-3805",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-3805"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-3805",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3805"
        }
      ],
      "release_date": "2019-04-30T17:12:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-06-15T16:17:24+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nYou must restart the JBoss server process for the update to take effect.\n\nThe References section of this erratum contains a download link (you must log in to download the update)",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2565"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wildfly: Race condition on PID file allows for termination of arbitrary processes by local users"
    },
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-06-15T16:17:24+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nYou must restart the JBoss server process for the update to take effect.\n\nThe References section of this erratum contains a download link (you must log in to download the update)",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2565"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-06-15T16:17:24+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nYou must restart the JBoss server process for the update to take effect.\n\nThe References section of this erratum contains a download link (you must log in to download the update)",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2565"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-06-15T16:17:24+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nYou must restart the JBoss server process for the update to take effect.\n\nThe References section of this erratum contains a download link (you must log in to download the update)",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2565"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9515",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735745"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735745",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-06-15T16:17:24+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nYou must restart the JBoss server process for the update to take effect.\n\nThe References section of this erratum contains a download link (you must log in to download the update)",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2565"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "F\u00e1bio Magalh\u00e3es de Andrade"
          ],
          "organization": "Sonda Ativas"
        },
        {
          "names": [
            "Juliano de Castro Santos",
            "Leonard Lunardi"
          ],
          "organization": "UnimedBH"
        }
      ],
      "cve": "CVE-2019-14838",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2019-08-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1751227"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that Wildfly users had default user permissions set incorrectly. A malicious user could use this flaw to access unauthorized controls for the application server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly-core: Incorrect privileges for \u0027Monitor\u0027, \u0027Auditor\u0027 and \u0027Deployer\u0027 user by default",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14838"
        },
        {
          "category": "external",
          "summary": "RHBZ#1751227",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1751227"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14838",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14838"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14838",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14838"
        },
        {
          "category": "external",
          "summary": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14838",
          "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14838"
        }
      ],
      "release_date": "2019-10-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-06-15T16:17:24+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nYou must restart the JBoss server process for the update to take effect.\n\nThe References section of this erratum contains a download link (you must log in to download the update)",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2565"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wildfly-core: Incorrect privileges for \u0027Monitor\u0027, \u0027Auditor\u0027 and \u0027Deployer\u0027 user by default"
    },
    {
      "cve": "CVE-2019-19343",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-12-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1780445"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Undertow: Memory Leak in Undertow HttpOpenListener due to holding remoting connections indefinitely",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-19343"
        },
        {
          "category": "external",
          "summary": "RHBZ#1780445",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1780445"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19343",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-19343"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19343",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19343"
        }
      ],
      "release_date": "2019-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-06-15T16:17:24+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nYou must restart the JBoss server process for the update to take effect.\n\nThe References section of this erratum contains a download link (you must log in to download the update)",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2565"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Undertow: Memory Leak in Undertow HttpOpenListener due to holding remoting connections indefinitely"
    },
    {
      "cve": "CVE-2020-11619",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-04-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1826805"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in org.springframework:spring-aop",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-11619"
        },
        {
          "category": "external",
          "summary": "RHBZ#1826805",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826805"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-11619",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-11619"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11619",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11619"
        }
      ],
      "release_date": "2020-04-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-06-15T16:17:24+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nYou must restart the JBoss server process for the update to take effect.\n\nThe References section of this erratum contains a download link (you must log in to download the update)",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2565"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in org.springframework:spring-aop"
    },
    {
      "cve": "CVE-2020-11620",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-04-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1826798"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in commons-jelly:commons-jelly",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-11620"
        },
        {
          "category": "external",
          "summary": "RHBZ#1826798",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826798"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-11620",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-11620"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11620",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11620"
        }
      ],
      "release_date": "2020-04-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-06-15T16:17:24+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nYou must restart the JBoss server process for the update to take effect.\n\nThe References section of this erratum contains a download link (you must log in to download the update)",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2565"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform Continuous Delivery"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in commons-jelly:commons-jelly"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for rh-nginx114-nginx is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2775",
        "url": "https://access.redhat.com/errata/RHSA-2019:2775"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2775.json"
      }
    ],
    "title": "Red Hat Security Advisory: rh-nginx114-nginx security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:24:31+00:00",
      "generator": {
        "date": "2024-11-05T21:24:31+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2775",
      "initial_release_date": "2019-09-17T15:16:26+00:00",
      "revision_history": [
        {
          "date": "2019-09-17T15:16:26+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-09-17T15:16:27+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:24:31+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-Alt-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
                  "product_id": "7Server-RHSCL-3.3-7.4.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                  "product_id": "7Server-RHSCL-3.3-7.5.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                  "product_id": "7Server-RHSCL-3.3-7.6.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                  "product_id": "7Server-RHSCL-3.3-7.7.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Software Collections"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
                  "product_id": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
                  "product_id": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-image-filter@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
                  "product_id": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-perl@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
                  "product_id": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-xslt-filter@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
                  "product_id": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-mail@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
                  "product_id": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-stream@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
                  "product_id": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-debuginfo@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
                "product": {
                  "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
                  "product_id": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx@1.14.1-1.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
                  "product_id": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-image-filter@1.14.1-1.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
                  "product_id": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-perl@1.14.1-1.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
                  "product_id": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-xslt-filter@1.14.1-1.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
                "product": {
                  "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
                  "product_id": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-mail@1.14.1-1.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
                "product": {
                  "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
                  "product_id": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-stream@1.14.1-1.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
                "product": {
                  "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
                  "product_id": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-debuginfo@1.14.1-1.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
                  "product_id": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
                  "product_id": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-image-filter@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
                  "product_id": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-perl@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
                  "product_id": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-xslt-filter@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
                  "product_id": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-mail@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
                  "product_id": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-stream@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
                  "product_id": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-debuginfo@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
                "product": {
                  "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
                  "product_id": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx@1.14.1-1.el7.1?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
                  "product_id": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
                  "product_id": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-image-filter@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
                  "product_id": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-perl@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
                  "product_id": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-xslt-filter@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
                  "product_id": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-mail@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
                  "product_id": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-stream@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
                  "product_id": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-debuginfo@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-17T15:16:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx114-nginx service must be restarted for this update to take effect.",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2775"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-17T15:16:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx114-nginx service must be restarted for this update to take effect.",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2775"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-17T15:16:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx114-nginx service must be restarted for this update to take effect.",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2775"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for nghttp2 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2692",
        "url": "https://access.redhat.com/errata/RHSA-2019:2692"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2692.json"
      }
    ],
    "title": "Red Hat Security Advisory: nghttp2 security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:23:39+00:00",
      "generator": {
        "date": "2024-11-05T21:23:39+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2692",
      "initial_release_date": "2019-09-09T20:13:58+00:00",
      "revision_history": [
        {
          "date": "2019-09-09T20:13:58+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-09-09T20:13:58+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:23:39+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat CodeReady Linux Builder (v. 8)",
                "product": {
                  "name": "Red Hat CodeReady Linux Builder (v. 8)",
                  "product_id": "CRB-8.0.0.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::crb"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS (v. 8)",
                  "product_id": "BaseOS-8.0.0.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
                "product": {
                  "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
                  "product_id": "libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libnghttp2-devel@1.33.0-1.el8_0.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
                "product": {
                  "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
                  "product_id": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nghttp2-debugsource@1.33.0-1.el8_0.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
                "product": {
                  "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
                  "product_id": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libnghttp2-debuginfo@1.33.0-1.el8_0.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
                "product": {
                  "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
                  "product_id": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nghttp2-debuginfo@1.33.0-1.el8_0.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libnghttp2-0:1.33.0-1.el8_0.1.i686",
                "product": {
                  "name": "libnghttp2-0:1.33.0-1.el8_0.1.i686",
                  "product_id": "libnghttp2-0:1.33.0-1.el8_0.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libnghttp2@1.33.0-1.el8_0.1?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
                "product": {
                  "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
                  "product_id": "libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libnghttp2-devel@1.33.0-1.el8_0.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nghttp2-0:1.33.0-1.el8_0.1.x86_64",
                "product": {
                  "name": "nghttp2-0:1.33.0-1.el8_0.1.x86_64",
                  "product_id": "nghttp2-0:1.33.0-1.el8_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nghttp2@1.33.0-1.el8_0.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64",
                "product": {
                  "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64",
                  "product_id": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nghttp2-debugsource@1.33.0-1.el8_0.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
                "product": {
                  "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
                  "product_id": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libnghttp2-debuginfo@1.33.0-1.el8_0.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
                "product": {
                  "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
                  "product_id": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nghttp2-debuginfo@1.33.0-1.el8_0.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
                "product": {
                  "name": "libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
                  "product_id": "libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libnghttp2@1.33.0-1.el8_0.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
                "product": {
                  "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
                  "product_id": "libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libnghttp2-devel@1.33.0-1.el8_0.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
                "product": {
                  "name": "nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
                  "product_id": "nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nghttp2@1.33.0-1.el8_0.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
                "product": {
                  "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
                  "product_id": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nghttp2-debugsource@1.33.0-1.el8_0.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
                "product": {
                  "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
                  "product_id": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libnghttp2-debuginfo@1.33.0-1.el8_0.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
                "product": {
                  "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
                  "product_id": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nghttp2-debuginfo@1.33.0-1.el8_0.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
                "product": {
                  "name": "libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
                  "product_id": "libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libnghttp2@1.33.0-1.el8_0.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
                "product": {
                  "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
                  "product_id": "libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libnghttp2-devel@1.33.0-1.el8_0.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nghttp2-0:1.33.0-1.el8_0.1.s390x",
                "product": {
                  "name": "nghttp2-0:1.33.0-1.el8_0.1.s390x",
                  "product_id": "nghttp2-0:1.33.0-1.el8_0.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nghttp2@1.33.0-1.el8_0.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
                "product": {
                  "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
                  "product_id": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nghttp2-debugsource@1.33.0-1.el8_0.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
                "product": {
                  "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
                  "product_id": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libnghttp2-debuginfo@1.33.0-1.el8_0.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
                "product": {
                  "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
                  "product_id": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nghttp2-debuginfo@1.33.0-1.el8_0.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libnghttp2-0:1.33.0-1.el8_0.1.s390x",
                "product": {
                  "name": "libnghttp2-0:1.33.0-1.el8_0.1.s390x",
                  "product_id": "libnghttp2-0:1.33.0-1.el8_0.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libnghttp2@1.33.0-1.el8_0.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
                "product": {
                  "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
                  "product_id": "libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libnghttp2-devel@1.33.0-1.el8_0.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nghttp2-0:1.33.0-1.el8_0.1.aarch64",
                "product": {
                  "name": "nghttp2-0:1.33.0-1.el8_0.1.aarch64",
                  "product_id": "nghttp2-0:1.33.0-1.el8_0.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nghttp2@1.33.0-1.el8_0.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
                "product": {
                  "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
                  "product_id": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nghttp2-debugsource@1.33.0-1.el8_0.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
                "product": {
                  "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
                  "product_id": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libnghttp2-debuginfo@1.33.0-1.el8_0.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
                "product": {
                  "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
                  "product_id": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nghttp2-debuginfo@1.33.0-1.el8_0.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
                "product": {
                  "name": "libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
                  "product_id": "libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libnghttp2@1.33.0-1.el8_0.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nghttp2-0:1.33.0-1.el8_0.1.src",
                "product": {
                  "name": "nghttp2-0:1.33.0-1.el8_0.1.src",
                  "product_id": "nghttp2-0:1.33.0-1.el8_0.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nghttp2@1.33.0-1.el8_0.1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64"
        },
        "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686"
        },
        "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.i686",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le"
        },
        "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x"
        },
        "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.s390x",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64"
        },
        "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64"
        },
        "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686"
        },
        "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le"
        },
        "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x"
        },
        "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64"
        },
        "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64"
        },
        "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686"
        },
        "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le"
        },
        "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x"
        },
        "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64"
        },
        "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64"
        },
        "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.aarch64",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le"
        },
        "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x"
        },
        "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.s390x",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-0:1.33.0-1.el8_0.1.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src"
        },
        "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.src",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64"
        },
        "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64"
        },
        "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686"
        },
        "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le"
        },
        "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x"
        },
        "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64"
        },
        "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64"
        },
        "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686"
        },
        "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le"
        },
        "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x"
        },
        "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64"
        },
        "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64"
        },
        "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686"
        },
        "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.i686",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le"
        },
        "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x"
        },
        "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.s390x",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64"
        },
        "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64"
        },
        "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686"
        },
        "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le"
        },
        "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x"
        },
        "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64"
        },
        "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64"
        },
        "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686"
        },
        "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le"
        },
        "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x"
        },
        "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64"
        },
        "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64"
        },
        "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.aarch64",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le"
        },
        "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x"
        },
        "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.s390x",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-0:1.33.0-1.el8_0.1.src as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src"
        },
        "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.src",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64"
        },
        "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.x86_64",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64"
        },
        "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686"
        },
        "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le"
        },
        "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x"
        },
        "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64"
        },
        "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64"
        },
        "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686"
        },
        "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le"
        },
        "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x"
        },
        "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64"
        },
        "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64",
        "relates_to_product_reference": "CRB-8.0.0.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
          "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686",
          "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
          "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x",
          "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
          "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
          "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
          "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
          "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
          "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
          "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
          "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
          "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
          "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
          "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
          "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64",
          "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
          "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x",
          "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src",
          "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64",
          "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
          "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
          "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
          "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
          "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
          "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
          "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
          "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
          "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
          "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64",
          "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
          "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686",
          "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
          "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x",
          "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
          "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
          "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
          "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
          "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
          "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
          "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
          "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
          "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
          "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
          "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
          "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64",
          "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
          "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x",
          "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src",
          "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64",
          "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
          "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
          "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
          "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
          "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
          "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
          "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
          "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
          "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
          "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-09T20:13:58+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2692"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
          "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686",
          "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
          "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x",
          "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
          "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
          "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
          "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
          "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
          "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
          "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
          "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
          "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
          "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
          "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
          "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64",
          "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
          "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x",
          "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src",
          "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64",
          "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
          "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
          "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
          "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
          "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
          "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
          "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
          "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
          "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
          "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64",
          "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
          "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686",
          "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
          "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x",
          "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
          "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
          "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
          "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
          "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
          "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
          "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
          "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
          "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
          "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
          "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
          "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64",
          "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
          "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x",
          "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src",
          "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64",
          "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
          "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
          "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
          "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
          "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
          "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
          "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
          "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
          "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
          "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-09T20:13:58+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2692"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src",
            "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
            "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src",
            "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x",
            "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for rh-nginx112-nginx is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2746",
        "url": "https://access.redhat.com/errata/RHSA-2019:2746"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2746.json"
      }
    ],
    "title": "Red Hat Security Advisory: rh-nginx112-nginx security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:24:05+00:00",
      "generator": {
        "date": "2024-11-05T21:24:05+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2746",
      "initial_release_date": "2019-09-13T08:46:52+00:00",
      "revision_history": [
        {
          "date": "2019-09-13T08:46:52+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-09-13T08:46:52+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:24:05+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-Alt-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
                  "product_id": "7Server-RHSCL-3.3-7.4.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                  "product_id": "7Server-RHSCL-3.3-7.5.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                  "product_id": "7Server-RHSCL-3.3-7.6.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                  "product_id": "7Server-RHSCL-3.3-7.7.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Software Collections"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
                  "product_id": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx@1.12.1-3.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
                  "product_id": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-image-filter@1.12.1-3.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
                  "product_id": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-xslt-filter@1.12.1-3.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
                  "product_id": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-mail@1.12.1-3.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
                  "product_id": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-stream@1.12.1-3.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
                  "product_id": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-debuginfo@1.12.1-3.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
                "product": {
                  "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
                  "product_id": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx@1.12.1-3.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
                "product": {
                  "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
                  "product_id": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-image-filter@1.12.1-3.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
                "product": {
                  "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
                  "product_id": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-xslt-filter@1.12.1-3.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
                "product": {
                  "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
                  "product_id": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-mail@1.12.1-3.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
                "product": {
                  "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
                  "product_id": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-stream@1.12.1-3.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
                "product": {
                  "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
                  "product_id": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-debuginfo@1.12.1-3.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
                  "product_id": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx@1.12.1-3.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
                  "product_id": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-image-filter@1.12.1-3.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
                  "product_id": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-xslt-filter@1.12.1-3.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
                  "product_id": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-mail@1.12.1-3.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
                  "product_id": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-stream@1.12.1-3.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
                  "product_id": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-debuginfo@1.12.1-3.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
                "product": {
                  "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
                  "product_id": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx@1.12.1-3.el7.1?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
                  "product_id": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
                  "product_id": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-image-filter@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
                  "product_id": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-perl@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
                  "product_id": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-xslt-filter@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
                  "product_id": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-mail@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
                  "product_id": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-stream@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
                  "product_id": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-debuginfo@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-13T08:46:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx112-nginx service must be restarted for this update to take effect.",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2746"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-13T08:46:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx112-nginx service must be restarted for this update to take effect.",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2746"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-13T08:46:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx112-nginx service must be restarted for this update to take effect.",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2746"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A minor version update (from 7.6 to 7.7) is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release of Red Hat Fuse 7.7.0 serves as a replacement for Red Hat Fuse 7.6, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.\n\nSecurity Fix(es):\n\n* netty (CVE-2016-4970 CVE-2020-7238 CVE-2019-20444 CVE-2019-20445)\n\n* dom4j (CVE-2018-1000632)\n\n* elasticsearch (CVE-2018-3831)\n\n* pdfbox (CVE-2018-11797)\n\n* vertx (CVE-2018-12541)\n\n* spring-data-jpa (CVE-2019-3797)\n\n* mina-core (CVE-2019-0231)\n\n* jackson-databind (CVE-2019-12086 CVE-2019-16335 CVE-2019-14540 CVE-2019-17267 CVE-2019-14892 CVE-2019-14893 CVE-2019-16942 CVE-2019-16943 CVE-2019-17531 CVE-2019-20330 CVE-2020-10673 CVE-2020-10672 CVE-2020-8840 CVE-2020-9546 CVE-2020-9547 CVE-2020-9548 CVE-2020-10968 CVE-2020-10969 CVE-2020-11111 CVE-2020-11112 CVE-2020-11113 CVE-2020-11620 CVE-2020-11619 CVE-2020-14195 CVE-2020-14060 CVE-2020-14061 CVE-2020-14062)\n\n* jackson-mapper-asl (CVE-2019-10172)\n\n* hawtio (CVE-2019-9827)\n\n* undertow (CVE-2019-9511 CVE-2020-1757 CVE-2019-14888 CVE-2020-1745)\n\n* santuario (CVE-2019-12400)\n\n* apache-commons-beanutils (CVE-2019-10086)\n\n* cxf (CVE-2019-17573)\n\n* apache-commons-configuration (CVE-2020-1953)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2020:3192",
        "url": "https://access.redhat.com/errata/RHSA-2020:3192"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=jboss.fuse\u0026version=7.7.0",
        "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=jboss.fuse\u0026version=7.7.0"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/"
      },
      {
        "category": "external",
        "summary": "1343616",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343616"
      },
      {
        "category": "external",
        "summary": "1620529",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1620529"
      },
      {
        "category": "external",
        "summary": "1632452",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1632452"
      },
      {
        "category": "external",
        "summary": "1637492",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1637492"
      },
      {
        "category": "external",
        "summary": "1638391",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1638391"
      },
      {
        "category": "external",
        "summary": "1697598",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1697598"
      },
      {
        "category": "external",
        "summary": "1700016",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1700016"
      },
      {
        "category": "external",
        "summary": "1713468",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1713468"
      },
      {
        "category": "external",
        "summary": "1715075",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1715075"
      },
      {
        "category": "external",
        "summary": "1728604",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728604"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1752770",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752770"
      },
      {
        "category": "external",
        "summary": "1755831",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1755831"
      },
      {
        "category": "external",
        "summary": "1755849",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1755849"
      },
      {
        "category": "external",
        "summary": "1758167",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758167"
      },
      {
        "category": "external",
        "summary": "1758171",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758171"
      },
      {
        "category": "external",
        "summary": "1758182",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758182"
      },
      {
        "category": "external",
        "summary": "1758187",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758187"
      },
      {
        "category": "external",
        "summary": "1758191",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758191"
      },
      {
        "category": "external",
        "summary": "1764658",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764658"
      },
      {
        "category": "external",
        "summary": "1767483",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1767483"
      },
      {
        "category": "external",
        "summary": "1772464",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1772464"
      },
      {
        "category": "external",
        "summary": "1775293",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1775293"
      },
      {
        "category": "external",
        "summary": "1793154",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793154"
      },
      {
        "category": "external",
        "summary": "1796225",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1796225"
      },
      {
        "category": "external",
        "summary": "1797011",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1797011"
      },
      {
        "category": "external",
        "summary": "1798509",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798509"
      },
      {
        "category": "external",
        "summary": "1798524",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798524"
      },
      {
        "category": "external",
        "summary": "1807305",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1807305"
      },
      {
        "category": "external",
        "summary": "1815212",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1815212"
      },
      {
        "category": "external",
        "summary": "1815470",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1815470"
      },
      {
        "category": "external",
        "summary": "1815495",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1815495"
      },
      {
        "category": "external",
        "summary": "1816330",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816330"
      },
      {
        "category": "external",
        "summary": "1816332",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816332"
      },
      {
        "category": "external",
        "summary": "1816337",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816337"
      },
      {
        "category": "external",
        "summary": "1816340",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816340"
      },
      {
        "category": "external",
        "summary": "1819208",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1819208"
      },
      {
        "category": "external",
        "summary": "1819212",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1819212"
      },
      {
        "category": "external",
        "summary": "1821304",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1821304"
      },
      {
        "category": "external",
        "summary": "1821311",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1821311"
      },
      {
        "category": "external",
        "summary": "1821315",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1821315"
      },
      {
        "category": "external",
        "summary": "1826798",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826798"
      },
      {
        "category": "external",
        "summary": "1826805",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826805"
      },
      {
        "category": "external",
        "summary": "1848958",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1848958"
      },
      {
        "category": "external",
        "summary": "1848960",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1848960"
      },
      {
        "category": "external",
        "summary": "1848962",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1848962"
      },
      {
        "category": "external",
        "summary": "1848966",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1848966"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3192.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Fuse 7.7.0 release and security update",
    "tracking": {
      "current_release_date": "2024-11-05T22:30:08+00:00",
      "generator": {
        "date": "2024-11-05T22:30:08+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2020:3192",
      "initial_release_date": "2020-07-28T15:54:02+00:00",
      "revision_history": [
        {
          "date": "2020-07-28T15:54:02+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-07-28T15:54:02+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T22:30:08+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Fuse 7.7.0",
                "product": {
                  "name": "Red Hat Fuse 7.7.0",
                  "product_id": "Red Hat Fuse 7.7.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_fuse:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Fuse"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-4970",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2016-06-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1343616"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: Infinite loop vulnerability when handling renegotiation using SslProvider.OpenSsl",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-4970"
        },
        {
          "category": "external",
          "summary": "RHBZ#1343616",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343616"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-4970",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-4970"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4970",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4970"
        }
      ],
      "release_date": "2016-06-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "netty: Infinite loop vulnerability when handling renegotiation using SslProvider.OpenSsl"
    },
    {
      "cve": "CVE-2018-3831",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2018-09-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1632452"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12 have an information disclosure issue when secrets are configured via the API. The Elasticsearch _cluster/settings API, when queried, could leak sensitive configuration information such as passwords, tokens, or usernames. This could allow an authenticated Elasticsearch user to improperly view these details.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "elasticsearch: Information exposure via _cluster/settings API",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Subscription Asset Manager is now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having a security impact Moderate, and is not currently planned to be addressed in future updates.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-3831"
        },
        {
          "category": "external",
          "summary": "RHBZ#1632452",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1632452"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-3831",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-3831"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-3831",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3831"
        }
      ],
      "release_date": "2018-09-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "elasticsearch: Information exposure via _cluster/settings API"
    },
    {
      "cve": "CVE-2018-11797",
      "cwe": {
        "id": "CWE-674",
        "name": "Uncontrolled Recursion"
      },
      "discovery_date": "2018-10-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1637492"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pdfbox: unbounded computation in parser resulting in a denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-11797"
        },
        {
          "category": "external",
          "summary": "RHBZ#1637492",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1637492"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-11797",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-11797"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-11797",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-11797"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread.html/a9760973a873522f4d4c0a99916ceb74f361d91006b663a0a418d34a@%3Cannounce.apache.org%3E",
          "url": "https://lists.apache.org/thread.html/a9760973a873522f4d4c0a99916ceb74f361d91006b663a0a418d34a@%3Cannounce.apache.org%3E"
        }
      ],
      "release_date": "2018-10-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "pdfbox: unbounded computation in parser resulting in a denial of service"
    },
    {
      "cve": "CVE-2018-12541",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2018-10-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1638391"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There should be a reasonnable limit (8192 bytes) above which the WebSocket gets an HTTP response with the 413 status code and the connection gets closed.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vertx: WebSocket HTTP upgrade implementation holds the entire http request in memory before the handshake",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-12541"
        },
        {
          "category": "external",
          "summary": "RHBZ#1638391",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1638391"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12541",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-12541"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12541",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12541"
        }
      ],
      "release_date": "2018-10-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vertx: WebSocket HTTP upgrade implementation holds the entire http request in memory before the handshake"
    },
    {
      "cve": "CVE-2018-1000632",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
      },
      "discovery_date": "2018-08-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1620529"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-1000632"
        },
        {
          "category": "external",
          "summary": "RHBZ#1620529",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1620529"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-1000632",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000632"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000632",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000632"
        }
      ],
      "release_date": "2018-07-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents"
    },
    {
      "cve": "CVE-2019-0231",
      "cwe": {
        "id": "CWE-319",
        "name": "Cleartext Transmission of Sensitive Information"
      },
      "discovery_date": "2019-04-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1700016"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A cryptographic protocol integrity flaw was discovered in Apache Mina. The closure of a TLS session would not always result in closure of the socket, allowing the conversation to continue in clear text. This could undermine the confidentiality of a connection and potentially disclose sensitive information to third-party attackers.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mina-core: Retaining an open socket in close_notify SSL-TLS leading to Information disclosure.",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "* Red Hat OpenStack Platform\u0027s OpenDaylight versions 8-10 contain the vulnerable code. However, these OpenDaylight versions were released as technical preview with limited support and will therefore not be updated. Other OpenDaylight versions do not contain the vulnerable library.\n\n* This issue affects the version of apache-mina shipped with Red Hat Gluster Storage 3, as it contains the vulnerable functionality.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0231"
        },
        {
          "category": "external",
          "summary": "RHBZ#1700016",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1700016"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0231",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0231"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0231",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0231"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2019/04/14/1",
          "url": "https://www.openwall.com/lists/oss-security/2019/04/14/1"
        }
      ],
      "release_date": "2019-04-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mina-core: Retaining an open socket in close_notify SSL-TLS leading to Information disclosure."
    },
    {
      "cve": "CVE-2019-3797",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-04-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1697598"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates \u2018startingWith\u2019, \u2018endingWith\u2019 or \u2018containing\u2019 could return more results than anticipated when a maliciously crafted query parameter value is supplied. Also, LIKE expressions in manually defined queries could return unexpected results if the parameter values bound did not have escaped reserved characters properly.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "spring-data-jpa: Additional information exposure with Spring Data JPA derived queries",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-3797"
        },
        {
          "category": "external",
          "summary": "RHBZ#1697598",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1697598"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-3797",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-3797"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-3797",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3797"
        }
      ],
      "release_date": "2019-04-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "spring-data-jpa: Additional information exposure with Spring Data JPA derived queries"
    },
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "cve": "CVE-2019-9827",
      "cwe": {
        "id": "CWE-602",
        "name": "Client-Side Enforcement of Server-Side Security"
      },
      "discovery_date": "2019-07-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1728604"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Hawt Hawtio through 2.5.0 is vulnerable to SSRF, allowing a remote attacker to trigger an HTTP request from an affected server to an arbitrary host via the initial /proxy/ substring of a URI.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "hawtio: server side request forgery via initial /proxy/ substring of a URI",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9827"
        },
        {
          "category": "external",
          "summary": "RHBZ#1728604",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728604"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9827",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9827"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9827",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9827"
        }
      ],
      "release_date": "2019-06-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "hawtio: server side request forgery via initial /proxy/ substring of a URI"
    },
    {
      "cve": "CVE-2019-10086",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2019-10-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1767483"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Apache Commons BeanUtils, where the class property in PropertyUtilsBean is not suppressed by default. This flaw allows an attacker to access the classloader.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10086"
        },
        {
          "category": "external",
          "summary": "RHBZ#1767483",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1767483"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10086",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10086"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10086",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10086"
        },
        {
          "category": "external",
          "summary": "https://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.4/RELEASE-NOTES.txt",
          "url": "https://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.4/RELEASE-NOTES.txt"
        }
      ],
      "release_date": "2019-08-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "There is no currently known mitigation for this flaw.",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Brian Stansberry"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2019-10172",
      "cwe": {
        "id": "CWE-611",
        "name": "Improper Restriction of XML External Entity Reference"
      },
      "discovery_date": "2019-04-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1715075"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries such that an XML external entity (XXE) vulnerability affects codehaus\u0027s jackson-mapper-asl libraries. This vulnerability is similar to CVE-2016-3720. The primary threat from this flaw is data integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-mapper-asl: XML external entity similar to CVE-2016-3720",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10172"
        },
        {
          "category": "external",
          "summary": "RHBZ#1715075",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1715075"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10172",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10172"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10172",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10172"
        }
      ],
      "release_date": "2019-11-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-mapper-asl: XML external entity similar to CVE-2016-3720"
    },
    {
      "cve": "CVE-2019-12086",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-05-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1713468"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker can host a crafted MySQL server reachable by the victim, an attacker can send a crafted JSON message that allows them to read arbitrary local files on the server. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin validation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server.",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Satellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-12086"
        },
        {
          "category": "external",
          "summary": "RHBZ#1713468",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1713468"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-12086",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-12086"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12086",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12086"
        }
      ],
      "release_date": "2019-05-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server."
    },
    {
      "cve": "CVE-2019-12400",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2019-08-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764658"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders. However, if some untrusted code can register a malicious implementation with the thread context class loader first, then this implementation might be cached and re-used by Apache Santuario - XML Security for Java, leading to potential security flaws when validating signed documents, etc. The vulnerability affects Apache Santuario - XML Security for Java 2.0.x releases from 2.0.3 and all 2.1.x releases before 2.1.4.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xml-security: Apache Santuario potentially loads XML parsing code from an untrusted source",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-12400"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764658",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764658"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-12400",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-12400"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12400",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12400"
        }
      ],
      "release_date": "2019-08-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "xml-security: Apache Santuario potentially loads XML parsing code from an untrusted source"
    },
    {
      "cve": "CVE-2019-12419",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "discovery_date": "2020-03-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1816175"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in cxf in versions prior to 3.2.11 and 3.3.4. The access token services do not properly validate that an authenticated principal is equal to that of the supplied clientId parameter allowing a malicious client to use an authorization code that has been issued to a different client as their own. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "cxf: OpenId Connect token service does not properly validate the clientId",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In OpenShift Logging the openshift-logging/elasticsearch6-rhel8 container bundles the vulnerable version of apache-cxf, but the vulnerable class is not shipped, hence this component is not affected by this vulnerability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-12419"
        },
        {
          "category": "external",
          "summary": "RHBZ#1816175",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816175"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-12419",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-12419"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12419",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12419"
        }
      ],
      "release_date": "2019-11-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "cxf: OpenId Connect token service does not properly validate the clientId"
    },
    {
      "cve": "CVE-2019-14540",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-09-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1755849"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nSatellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14540"
        },
        {
          "category": "external",
          "summary": "RHBZ#1755849",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1755849"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14540",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14540"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14540",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14540"
        }
      ],
      "release_date": "2019-09-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "This vulnerability relies on com.zaxxer.hikari.HikariConfig being present in the application\u0027s ClassPath. Hikari is not packaged as an RPM for Red Hat Enterprise Linux or Red Hat Software Collections. Applications using jackson-databind that do not also use com.zaxxer.hikari are not impacted by this vulnerability.\n\nA mitigation to this class of problem in jackson-databind is to not trigger polymorphic desrialization globally by using: objectMapper.enableDefaultTyping() and rather use @JsonTypeInfo on the class property to explicitly define the type information. For more information on this issue please refer to https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Henning Baldersheim",
            "H\u00e5vard Pettersen"
          ],
          "organization": "Verizon Media"
        }
      ],
      "cve": "CVE-2019-14888",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-10-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1772464"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in the Undertow HTTP server listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service (DOS) to make the service unavailable on SSL.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14888"
        },
        {
          "category": "external",
          "summary": "RHBZ#1772464",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1772464"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14888",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14888"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14888",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14888"
        }
      ],
      "release_date": "2020-01-20T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "Enable HTTP2 (enable-http2=\"true\") in the undertow\u0027s HTTPS settings.",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS"
    },
    {
      "cve": "CVE-2019-14892",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-09-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1758171"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization of a malicious object using commons-configuration 1 and 2 JNDI classes. An attacker could use this flaw to execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in classes of the commons-configuration package",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Satellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14892"
        },
        {
          "category": "external",
          "summary": "RHBZ#1758171",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758171"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14892",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14892"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14892",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14892"
        }
      ],
      "release_date": "2019-09-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in classes of the commons-configuration package"
    },
    {
      "cve": "CVE-2019-14893",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-09-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1758182"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in classes of the xalan package",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Satellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14893"
        },
        {
          "category": "external",
          "summary": "RHBZ#1758182",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758182"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14893",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14893"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14893",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14893"
        }
      ],
      "release_date": "2019-09-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in classes of the xalan package"
    },
    {
      "cve": "CVE-2019-16335",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-09-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1755831"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nSatellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-16335"
        },
        {
          "category": "external",
          "summary": "RHBZ#1755831",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1755831"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-16335",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-16335"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-16335",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16335"
        }
      ],
      "release_date": "2019-09-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "This vulnerability relies on com.zaxxer.hikari.HikariDataSource being present in the application\u0027s ClassPath. Hikari is not packaged as an RPM for Red Hat Enterprise Linux or Red Hat Software Collections. Applications using jackson-databind that do not also use com.zaxxer.hikari are not impacted by this vulnerability.\n\nA mitigation to this class of problem in jackson-databind is to not trigger polymorphic desrialization globally by using: objectMapper.enableDefaultTyping() and rather use @JsonTypeInfo on the class property to explicitly define the type information. For more information on this issue please refer to https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource"
    },
    {
      "cve": "CVE-2019-16942",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-09-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1758187"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Satellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-16942"
        },
        {
          "category": "external",
          "summary": "RHBZ#1758187",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758187"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-16942",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-16942"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-16942",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16942"
        }
      ],
      "release_date": "2019-09-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*"
    },
    {
      "cve": "CVE-2019-16943",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-09-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1758191"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of com.p6spy.engine.spy.P6DataSource mishandling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Satellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-16943"
        },
        {
          "category": "external",
          "summary": "RHBZ#1758191",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758191"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-16943",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-16943"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-16943",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16943"
        }
      ],
      "release_date": "2019-09-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource"
    },
    {
      "cve": "CVE-2019-17267",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-09-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1758167"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in classes of the ehcache package",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nRed Hat OpenShift Container Platform does ship the vulnerable component, but does not enable the unsafe conditions needed to exploit, lowering their vulnerability impact.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-17267"
        },
        {
          "category": "external",
          "summary": "RHBZ#1758167",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758167"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-17267",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-17267"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17267",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17267"
        }
      ],
      "release_date": "2019-09-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in classes of the ehcache package"
    },
    {
      "cve": "CVE-2019-17531",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2019-11-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1775293"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Satellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenShift Container Platform does ship the vulnerable component, but does not enable the unsafe conditions needed to exploit, lowering their vulnerability impact.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-17531"
        },
        {
          "category": "external",
          "summary": "RHBZ#1775293",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1775293"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-17531",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-17531"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17531",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17531"
        }
      ],
      "release_date": "2019-10-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*"
    },
    {
      "cve": "CVE-2019-17573",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2020-01-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1797011"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack, which allows a malicious actor to inject javascript into the web page. Please note that the attack exploits a feature which is not typically not present in modern browsers, who remove dot segments before sending the request. However, Mobile applications may be vulnerable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "cxf: reflected XSS in the services listing page",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-17573"
        },
        {
          "category": "external",
          "summary": "RHBZ#1797011",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1797011"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-17573",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-17573"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17573",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17573"
        }
      ],
      "release_date": "2020-01-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "Mitigate this flaw by disabling the service listing altogether; via setting the \"hide-service-list-page\" servlet parameter to \"true\".",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "cxf: reflected XSS in the services listing page"
    },
    {
      "cve": "CVE-2019-20330",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-01-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1793154"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: lacks certain net.sf.ehcache blocking",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-20330"
        },
        {
          "category": "external",
          "summary": "RHBZ#1793154",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793154"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20330",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-20330"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20330",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20330"
        }
      ],
      "release_date": "2020-01-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: lacks certain net.sf.ehcache blocking"
    },
    {
      "cve": "CVE-2019-20444",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2020-01-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1798524"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF (carriage return, line feed) without being followed by SP (space) or HTAB (horizontal tab), result in situations where headers can be misread. Data integrity is the highest threat with this vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HTTP request smuggling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that the previous vulnerability, CVE-2019-16869, does not pose a substantial practical threat to ElasticSearch 6. We agree that these issues would be difficult to exploit on OpenShift Container Platform so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships a vulnerable version of netty embedded in Candlepin. However, the flaw can not be triggered in that context, because HTTP requests are handled by Tomcat, not by netty. A future release may fix this.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-20444"
        },
        {
          "category": "external",
          "summary": "RHBZ#1798524",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798524"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20444",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-20444"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20444",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20444"
        },
        {
          "category": "external",
          "summary": "https://github.com/elastic/elasticsearch/issues/49396",
          "url": "https://github.com/elastic/elasticsearch/issues/49396"
        }
      ],
      "release_date": "2020-01-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HTTP request smuggling"
    },
    {
      "cve": "CVE-2019-20445",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2020-01-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1798509"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty before version 4.1.44, where it accepted multiple Content-Length headers and also accepted both Transfer-Encoding, as well as Content-Length headers where it should reject the message under such circumstances. In circumstances where Netty is used in the context of a server, it could result in a viable HTTP smuggling vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that the previous vulnerability, CVE-2019-16869, does not poses a substantial practical threat to ElasticSearch 6 [1]. We agree that this issue would be difficult to exploit both these vulnerabilities on OpenShift Container Platform, so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships a vulnerable version of netty embedded in Candlepin. However, the flaw can not be triggered in that context, because HTTP requests are handled by Tomcat, not by netty. A future release may fix this.\n\n[1]  https://github.com/elastic/elasticsearch/issues/49396",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-20445"
        },
        {
          "category": "external",
          "summary": "RHBZ#1798509",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798509"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20445",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-20445"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20445",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20445"
        }
      ],
      "release_date": "2020-01-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Steve Zapantis",
            "Robert Roberson",
            "taktakdb4g"
          ]
        }
      ],
      "cve": "CVE-2020-1745",
      "cwe": {
        "id": "CWE-285",
        "name": "Improper Authorization"
      },
      "discovery_date": "2020-02-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1807305"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "undertow: AJP File Read/Inclusion Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Please refer to the Red Hat knowledgebase article: https://access.redhat.com/solutions/4851251 and CVE page https://access.redhat.com/security/cve/cve-2020-1938",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-1745"
        },
        {
          "category": "external",
          "summary": "RHBZ#1807305",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1807305"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1745",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-1745"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1745",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1745"
        },
        {
          "category": "external",
          "summary": "https://meterpreter.org/cve-2020-1938-apache-tomcat-ajp-connector-remote-code-execution-vulnerability-alert/",
          "url": "https://meterpreter.org/cve-2020-1938-apache-tomcat-ajp-connector-remote-code-execution-vulnerability-alert/"
        },
        {
          "category": "external",
          "summary": "https://www.cnvd.org.cn/webinfo/show/5415",
          "url": "https://www.cnvd.org.cn/webinfo/show/5415"
        },
        {
          "category": "external",
          "summary": "https://www.tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487",
          "url": "https://www.tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487"
        }
      ],
      "release_date": "2020-02-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "Please refer to the Red Hat knowledgebase article: https://access.redhat.com/solutions/4851251",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "undertow: AJP File Read/Inclusion Vulnerability"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Fedorov Oleksii",
            "Keitaro Yamazaki",
            "Shiga Ryota"
          ],
          "organization": "LINE Corporation"
        }
      ],
      "cve": "CVE-2020-1757",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-09-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1752770"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Undertow, where the servlet container causes the servletPath to normalize incorrectly by truncating the path after the semicolon. The flaw may lead to application mapping, resulting in a security bypass.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "undertow: servletPath is normalized incorrectly leading to dangerous application mapping which could result in security bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-1757"
        },
        {
          "category": "external",
          "summary": "RHBZ#1752770",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752770"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1757",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-1757"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1757",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1757"
        }
      ],
      "release_date": "2018-12-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "The issue can be mitigated by configuring UrlPathHelper to ignore the servletPath via setting \"alwaysUseFullPath\".",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "undertow: servletPath is normalized incorrectly leading to dangerous application mapping which could result in security bypass"
    },
    {
      "cve": "CVE-2020-1953",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2020-03-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1815212"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Apache Commons Configuration, where it uses a third-party library to process YAML files, which by default, allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this library. If a YAML file was loaded from an untrusted source, it could load and execute code out of the control of the host application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "apache-commons-configuration: uncontrolled class instantiation when loading YAML files",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Several packages are unaffected because they do not include support for YAML configurations:\n* `apache-commons-configuration` as shipped with Red Hat Enterprise Linux 7\n* `apache-commons-configuration` as shipped with Red Hat Enterprise Virtualization\n* `rh-maven35-apache-commons-configuration` as shipped with Red Hat Software Collections\n* `commons-configuration` as shipped with Red Hat Gluster Storage",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-1953"
        },
        {
          "category": "external",
          "summary": "RHBZ#1815212",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1815212"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1953",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-1953"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1953",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1953"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/commons-configuration/commit/add7375cf37fd316d4838c6c56b054fc293b4641",
          "url": "https://github.com/apache/commons-configuration/commit/add7375cf37fd316d4838c6c56b054fc293b4641"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread.html/rde2186ad6ac0d6ed8d51af7509244adcf1ce0f9a3b7e1d1dd3b64676@%3Ccommits.camel.apache.org%3E",
          "url": "https://lists.apache.org/thread.html/rde2186ad6ac0d6ed8d51af7509244adcf1ce0f9a3b7e1d1dd3b64676@%3Ccommits.camel.apache.org%3E"
        }
      ],
      "release_date": "2020-03-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "There is currently no mitigation available for this vulnerability.",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.0,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "apache-commons-configuration: uncontrolled class instantiation when loading YAML files"
    },
    {
      "cve": "CVE-2020-7238",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2020-01-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1796225"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty, where it mishandles Transfer-Encoding whitespace. This flaw allows HTTP Request Smuggling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that the previous vulnerability, CVE-2019-16869, does not poses a substantial practical threat to ElasticSearch 6 [1]. We agree that this issue would be difficult to exploit both these vulnerabilities on OpenShift Container Platform, so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships vulnerable netty version embedded in Candlepin, however, is not directly vulnerable since HTTP requests are handled by Tomcat and not netty.\n\n[1]  https://github.com/elastic/elasticsearch/issues/49396",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-7238"
        },
        {
          "category": "external",
          "summary": "RHBZ#1796225",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1796225"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-7238",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-7238"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7238",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7238"
        },
        {
          "category": "external",
          "summary": "https://netty.io/news/2019/12/18/4-1-44-Final.html",
          "url": "https://netty.io/news/2019/12/18/4-1-44-Final.html"
        }
      ],
      "release_date": "2020-01-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling"
    },
    {
      "cve": "CVE-2020-8840",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1816330"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in FasterXML jackson-databind in versions 2.0.0 through 2.9.10.2. A \"gadget\" exploit is possible due to a lack of a Java object being blocking from being deserialized. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Lacks certain xbean-reflect/JNDI blocking",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-8840"
        },
        {
          "category": "external",
          "summary": "RHBZ#1816330",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816330"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-8840",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-8840"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8840",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8840"
        }
      ],
      "release_date": "2020-03-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Lacks certain xbean-reflect/JNDI blocking"
    },
    {
      "cve": "CVE-2020-9546",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1816332"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in shaded-hikari-config",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-9546"
        },
        {
          "category": "external",
          "summary": "RHBZ#1816332",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816332"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-9546",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-9546"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-9546",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9546"
        }
      ],
      "release_date": "2020-03-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in shaded-hikari-config"
    },
    {
      "cve": "CVE-2020-9547",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1816337"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in ibatis-sqlmap",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-9547"
        },
        {
          "category": "external",
          "summary": "RHBZ#1816337",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816337"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-9547",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-9547"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-9547",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9547"
        }
      ],
      "release_date": "2020-03-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in ibatis-sqlmap"
    },
    {
      "cve": "CVE-2020-9548",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1816340"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in anteros-core",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-9548"
        },
        {
          "category": "external",
          "summary": "RHBZ#1816340",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816340"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-9548",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-9548"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-9548",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9548"
        }
      ],
      "release_date": "2020-03-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in anteros-core"
    },
    {
      "cve": "CVE-2020-10672",
      "cwe": {
        "id": "CWE-96",
        "name": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)"
      },
      "discovery_date": "2020-03-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1815495"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-10672"
        },
        {
          "category": "external",
          "summary": "RHBZ#1815495",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1815495"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-10672",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-10672"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10672",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10672"
        }
      ],
      "release_date": "2020-03-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution"
    },
    {
      "cve": "CVE-2020-10673",
      "cwe": {
        "id": "CWE-96",
        "name": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)"
      },
      "discovery_date": "2020-03-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1815470"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time. Additionally, the gadget is not available within Red Hat Openstack Platform\u0027s OpenDaylight.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-10673"
        },
        {
          "category": "external",
          "summary": "RHBZ#1815470",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1815470"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-10673",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-10673"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10673",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10673"
        }
      ],
      "release_date": "2020-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Aaron Ogburn"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2020-10687",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2019-06-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1785049"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was discovered in Undertow where HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Undertow: Incomplete fix for CVE-2017-2666 due to permitting invalid characters in HTTP requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-10687"
        },
        {
          "category": "external",
          "summary": "RHBZ#1785049",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1785049"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-10687",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-10687"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10687",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10687"
        }
      ],
      "release_date": "2020-04-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Undertow: Incomplete fix for CVE-2017-2666 due to permitting invalid characters in HTTP requests"
    },
    {
      "cve": "CVE-2020-10968",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-03-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1819208"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x prior to version 2.9.10.4.  The interaction between serialization gadgets and typing is mishandled in the bus-proxy. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-10968"
        },
        {
          "category": "external",
          "summary": "RHBZ#1819208",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1819208"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-10968",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-10968"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10968",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10968"
        }
      ],
      "release_date": "2020-03-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider"
    },
    {
      "cve": "CVE-2020-10969",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-03-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1819212"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in javax.swing.JEditorPane",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-10969"
        },
        {
          "category": "external",
          "summary": "RHBZ#1819212",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1819212"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-10969",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-10969"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10969",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10969"
        }
      ],
      "release_date": "2020-03-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in javax.swing.JEditorPane"
    },
    {
      "cve": "CVE-2020-11111",
      "cwe": {
        "id": "CWE-96",
        "name": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)"
      },
      "discovery_date": "2020-03-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1821304"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-11111"
        },
        {
          "category": "external",
          "summary": "RHBZ#1821304",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1821304"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-11111",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-11111"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11111",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11111"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-databind/issues/2664",
          "url": "https://github.com/FasterXML/jackson-databind/issues/2664"
        }
      ],
      "release_date": "2020-03-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory"
    },
    {
      "cve": "CVE-2020-11112",
      "cwe": {
        "id": "CWE-96",
        "name": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)"
      },
      "discovery_date": "2020-03-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1821311"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-11112"
        },
        {
          "category": "external",
          "summary": "RHBZ#1821311",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1821311"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-11112",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-11112"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11112",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11112"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-databind/issues/2666",
          "url": "https://github.com/FasterXML/jackson-databind/issues/2666"
        }
      ],
      "release_date": "2020-03-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider"
    },
    {
      "cve": "CVE-2020-11113",
      "cwe": {
        "id": "CWE-96",
        "name": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)"
      },
      "discovery_date": "2020-03-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1821315"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-11113"
        },
        {
          "category": "external",
          "summary": "RHBZ#1821315",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1821315"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-11113",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-11113"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11113",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11113"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-databind/issues/2670",
          "url": "https://github.com/FasterXML/jackson-databind/issues/2670"
        }
      ],
      "release_date": "2020-03-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime"
    },
    {
      "cve": "CVE-2020-11619",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-04-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1826805"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in org.springframework:spring-aop",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-11619"
        },
        {
          "category": "external",
          "summary": "RHBZ#1826805",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826805"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-11619",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-11619"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11619",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11619"
        }
      ],
      "release_date": "2020-04-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in org.springframework:spring-aop"
    },
    {
      "cve": "CVE-2020-11620",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-04-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1826798"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in commons-jelly:commons-jelly",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-11620"
        },
        {
          "category": "external",
          "summary": "RHBZ#1826798",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826798"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-11620",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-11620"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11620",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11620"
        }
      ],
      "release_date": "2020-04-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in commons-jelly:commons-jelly"
    },
    {
      "cve": "CVE-2020-14060",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-06-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1848960"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 and Red Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.\n\nThe version of jackson-databind as shipped in Red Hat Software Collections rh-maven35 is used only while building maven, thus it does not deserialize data coming from untrusted sources, lowering the impact of the vulnerability for the Product.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-14060"
        },
        {
          "category": "external",
          "summary": "RHBZ#1848960",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1848960"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-14060",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-14060"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-14060",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-14060"
        }
      ],
      "release_date": "2020-05-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* enableDefaultTyping()\n* @JsonTypeInfo using id.CLASS or id.MINIMAL_CLASS\n* oadd.org.apache.xalan.lib.sql.JNDIConnectionPool in classpath",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool"
    },
    {
      "cve": "CVE-2020-14061",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-06-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1848966"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: serialization in weblogic/oracle-aqjms",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 and Red Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.\n\nThe version of jackson-databind as shipped in Red Hat Software Collections rh-maven35 is used only while building maven, thus it does not deserialize data coming from untrusted sources, lowering the impact of the vulnerability for the Product.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-14061"
        },
        {
          "category": "external",
          "summary": "RHBZ#1848966",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1848966"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-14061",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-14061"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-14061",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-14061"
        }
      ],
      "release_date": "2020-05-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* enableDefaultTyping()\n* @JsonTypeInfo using id.CLASS or id.MINIMAL_CLASS\n* oracle.jms.AQjms*ConnectionFactory in classpath",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: serialization in weblogic/oracle-aqjms"
    },
    {
      "cve": "CVE-2020-14062",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-06-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1848962"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 and Red Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.\n\nThe version of jackson-databind as shipped in Red Hat Software Collections rh-maven35 is used only while building maven, thus it does not deserialize data coming from untrusted sources, lowering the impact of the vulnerability for the Product.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-14062"
        },
        {
          "category": "external",
          "summary": "RHBZ#1848962",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1848962"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-14062",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-14062"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-14062",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-14062"
        }
      ],
      "release_date": "2020-05-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* enableDefaultTyping()\n* @JsonTypeInfo using id.CLASS or id.MINIMAL_CLASS\n* com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool in classpath",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool"
    },
    {
      "cve": "CVE-2020-14195",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-06-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1848958"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 and Red Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.\n\nThe version of jackson-databind as shipped in Red Hat Software Collections rh-maven35 is used only while building maven, thus it does not deserialize data coming from untrusted sources, lowering the impact of the vulnerability for the Product.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.7.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-14195"
        },
        {
          "category": "external",
          "summary": "RHBZ#1848958",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1848958"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-14195",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-14195"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-14195",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-14195"
        }
      ],
      "release_date": "2020-06-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-07-28T15:54:02+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.7.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3192"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* enableDefaultTyping()\n* @JsonTypeInfo using id.CLASS or id.MINIMAL_CLASS\n* org.jsecurity.realm.jndi.JndiRealmFactory in classpath",
          "product_ids": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Fuse 7.7.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for JBoss Core Services on RHEL 6 and RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.\n\nThis release of Red Hat JBoss Core Services Apache HTTP Server 2.4.29 Service Pack 3 serves as an update to Red Hat JBoss Core Services Apache HTTP Server 2.4.29, and includes bug fixes for CVEs which are linked in the References section.\n\nSecurity Fix(es):\n\n* mod_http2: HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\n* mod_http2: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\nBug Fix(es):\n\n* nghttp2: Rebase to 1.39.2\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2946",
        "url": "https://access.redhat.com/errata/RHSA-2019:2946"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "external",
        "summary": "JBCS-826",
        "url": "https://issues.redhat.com/browse/JBCS-826"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2946.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 SP3 security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:27:31+00:00",
      "generator": {
        "date": "2024-11-05T21:27:31+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2946",
      "initial_release_date": "2019-10-01T13:40:45+00:00",
      "revision_history": [
        {
          "date": "2019-10-01T13:40:45+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-10-01T13:40:45+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:27:31+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services on RHEL 6 Server",
                "product": {
                  "name": "Red Hat JBoss Core Services on RHEL 6 Server",
                  "product_id": "6Server-JBCS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1::el6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services on RHEL 7 Server",
                "product": {
                  "name": "Red Hat JBoss Core Services on RHEL 7 Server",
                  "product_id": "7Server-JBCS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Core Services"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-1.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-1.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-1.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-41.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.29-41.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.29-41.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.29-41.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.29-41.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.29-41.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.29-41.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.29-41.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.29-41.jbcs.el6?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-1.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-1.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-1.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-41.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.29-41.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.29-41.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.29-41.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.29-41.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.29-41.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.29-41.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.29-41.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.29-41.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-1.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-1.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-1.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-41.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.29-41.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.29-41.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.29-41.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.29-41.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.29-41.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.29-41.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.29-41.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.29-41.jbcs.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-1.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-41.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-1.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-41.jbcs.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
                "product": {
                  "name": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
                  "product_id": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.29-41.jbcs.el6?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
                "product": {
                  "name": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
                  "product_id": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.29-41.jbcs.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch"
        },
        "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch"
        },
        "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T13:40:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2946"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T13:40:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2946"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T13:40:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2946"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T13:40:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2946"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated Quay packages that fix several bugs and add various enhancements are now available.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Quay 3.1.1 errata release, including:\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Fixed repository mirror credentials properly escaped to allow special characters\n* Fixed repository mirror UI cancel button enabled\n* Fixed repository mirror UI change next sync date",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2966",
        "url": "https://access.redhat.com/errata/RHSA-2019:2966"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1750473",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1750473"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2966.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Quay v3.1.1 security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:27:56+00:00",
      "generator": {
        "date": "2024-11-05T21:27:56+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2966",
      "initial_release_date": "2019-10-03T18:57:22+00:00",
      "revision_history": [
        {
          "date": "2019-10-03T18:57:22+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-10-03T18:57:22+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:27:56+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Quay v3",
                "product": {
                  "name": "Quay v3",
                  "product_id": "7Server-RH7-Quay-3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64",
                "product": {
                  "name": "quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64",
                  "product_id": "quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821?arch=amd64\u0026repository_url=registry.redhat.io/quay3/clair-jwt\u0026tag=v2.0.9-7"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64 as a component of Quay v3",
          "product_id": "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
        },
        "product_reference": "quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64",
        "relates_to_product_reference": "7Server-RH7-Quay-3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-03T18:57:22+00:00",
          "details": "Please download the release images via:\n\nquay.io/redhat/quay:v3.1.1\nquay.io/redhat/clair-jwt:v3.1.1\nquay.io/redhat/quay-builder:v3.1.1",
          "product_ids": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2966"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-03T18:57:22+00:00",
          "details": "Please download the release images via:\n\nquay.io/redhat/quay:v3.1.1\nquay.io/redhat/clair-jwt:v3.1.1\nquay.io/redhat/quay-builder:v3.1.1",
          "product_ids": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2966"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-03T18:57:22+00:00",
          "details": "Please download the release images via:\n\nquay.io/redhat/quay:v3.1.1\nquay.io/redhat/clair-jwt:v3.1.1\nquay.io/redhat/quay-builder:v3.1.1",
          "product_ids": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2966"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-03T18:57:22+00:00",
          "details": "Please download the release images via:\n\nquay.io/redhat/quay:v3.1.1\nquay.io/redhat/clair-jwt:v3.1.1\nquay.io/redhat/quay-builder:v3.1.1",
          "product_ids": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2966"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-03T18:57:22+00:00",
          "details": "Please download the release images via:\n\nquay.io/redhat/quay:v3.1.1\nquay.io/redhat/clair-jwt:v3.1.1\nquay.io/redhat/quay-builder:v3.1.1",
          "product_ids": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2966"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for rh-nodejs8-nodejs is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nThe following packages have been upgraded to a later upstream version: rh-nodejs8-nodejs (8.16.1).\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* HTTP/2: flood using PRIORITY frames results in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)\n\n* HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\n* HTTP/2: flood using empty frames results in excessive resource consumption (CVE-2019-9518)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2955",
        "url": "https://access.redhat.com/errata/RHSA-2019:2955"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1735745",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
      },
      {
        "category": "external",
        "summary": "1735749",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2955.json"
      }
    ],
    "title": "Red Hat Security Advisory: rh-nodejs8-nodejs security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:27:44+00:00",
      "generator": {
        "date": "2024-11-05T21:27:44+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2955",
      "initial_release_date": "2019-10-02T14:29:13+00:00",
      "revision_history": [
        {
          "date": "2019-10-02T14:29:13+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-10-02T14:29:13+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:27:44+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-Alt-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                  "product_id": "7Server-RHSCL-3.3-7.5.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                  "product_id": "7Server-RHSCL-3.3-7.6.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                  "product_id": "7Server-RHSCL-3.3-7.7.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Software Collections"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs8-0:3.0-5.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs8-0:3.0-5.el7.ppc64le",
                  "product_id": "rh-nodejs8-0:3.0-5.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8@3.0-5.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
                  "product_id": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-runtime@3.0-5.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
                  "product_id": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-scldevel@3.0-5.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
                  "product_id": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.1-2.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
                  "product_id": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.1-2.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
                  "product_id": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.1.2.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
                  "product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.1-2.el7?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs8-0:3.0-5.el7.s390x",
                "product": {
                  "name": "rh-nodejs8-0:3.0-5.el7.s390x",
                  "product_id": "rh-nodejs8-0:3.0-5.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8@3.0-5.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x",
                "product": {
                  "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x",
                  "product_id": "rh-nodejs8-runtime-0:3.0-5.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-runtime@3.0-5.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
                "product": {
                  "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
                  "product_id": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-scldevel@3.0-5.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
                "product": {
                  "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
                  "product_id": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.1-2.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
                "product": {
                  "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
                  "product_id": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.1-2.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
                "product": {
                  "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
                  "product_id": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.1.2.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
                "product": {
                  "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
                  "product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.1-2.el7?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs8-0:3.0-5.el7.aarch64",
                "product": {
                  "name": "rh-nodejs8-0:3.0-5.el7.aarch64",
                  "product_id": "rh-nodejs8-0:3.0-5.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8@3.0-5.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
                "product": {
                  "name": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
                  "product_id": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-runtime@3.0-5.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
                "product": {
                  "name": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
                  "product_id": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-scldevel@3.0-5.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
                "product": {
                  "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
                  "product_id": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.1-2.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
                "product": {
                  "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
                  "product_id": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.1-2.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
                "product": {
                  "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
                  "product_id": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.1.2.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
                "product": {
                  "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
                  "product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.1-2.el7?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs8-0:3.0-5.el7.src",
                "product": {
                  "name": "rh-nodejs8-0:3.0-5.el7.src",
                  "product_id": "rh-nodejs8-0:3.0-5.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8@3.0-5.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
                "product": {
                  "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
                  "product_id": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.1-2.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs8-0:3.0-5.el7.x86_64",
                "product": {
                  "name": "rh-nodejs8-0:3.0-5.el7.x86_64",
                  "product_id": "rh-nodejs8-0:3.0-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8@3.0-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
                "product": {
                  "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
                  "product_id": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-runtime@3.0-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
                "product": {
                  "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
                  "product_id": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-scldevel@3.0-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
                "product": {
                  "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
                  "product_id": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.1-2.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
                "product": {
                  "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
                  "product_id": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.1-2.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
                "product": {
                  "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
                  "product_id": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.1.2.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
                "product": {
                  "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
                  "product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.1-2.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
                "product": {
                  "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
                  "product_id": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-docs@8.16.1-2.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.src",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch"
        },
        "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch"
        },
        "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch"
        },
        "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch"
        },
        "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch"
        },
        "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.src",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch"
        },
        "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-02T14:29:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2955"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-02T14:29:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2955"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-02T14:29:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2955"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-02T14:29:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2955"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9515",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735745"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735745",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-02T14:29:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2955"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-02T14:29:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2955"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-02T14:29:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2955"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9518",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735749"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using frames with an empty payload, a flood could occur that results in excessive CPU usage and starvation of other clients. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using empty frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735749",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9518",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-02T14:29:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2955"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using empty frames results in excessive resource consumption"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release adds the new Apache HTTP Server 2.4.37 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.29 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys (CVE-2018-0737) * openssl: timing side channel attack in the DSA signature algorithm (CVE-2018-0734) * mod_auth_digest: access control bypass due to race condition (CVE-2019-0217) * openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407) * mod_session_cookie does not respect expiry time (CVE-2018-17199) * mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189) * mod_http2: possible crash on late upgrade (CVE-2019-0197) * mod_http2: read-after-free on a string compare (CVE-2019-0196) * nghttp2: HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511) * nghttp2: HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513) * mod_http2: HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516) * mod_http2: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:3932",
        "url": "https://access.redhat.com/errata/RHSA-2019:3932"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1568253",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253"
      },
      {
        "category": "external",
        "summary": "1644364",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364"
      },
      {
        "category": "external",
        "summary": "1645695",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695"
      },
      {
        "category": "external",
        "summary": "1668493",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668493"
      },
      {
        "category": "external",
        "summary": "1668497",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668497"
      },
      {
        "category": "external",
        "summary": "1695020",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695020"
      },
      {
        "category": "external",
        "summary": "1695030",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
      },
      {
        "category": "external",
        "summary": "1695042",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "external",
        "summary": "JBCS-798",
        "url": "https://issues.redhat.com/browse/JBCS-798"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3932.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release on RHEL 6",
    "tracking": {
      "current_release_date": "2024-11-05T21:37:07+00:00",
      "generator": {
        "date": "2024-11-05T21:37:07+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:3932",
      "initial_release_date": "2019-11-20T16:22:09+00:00",
      "revision_history": [
        {
          "date": "2019-11-20T16:22:09+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-01-06T13:05:52+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:37:07+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services on RHEL 6 Server",
                "product": {
                  "name": "Red Hat JBoss Core Services on RHEL 6 Server",
                  "product_id": "6Server-JBCS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1::el6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Core Services"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-20.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-devel@2.11-20.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-debuginfo@2.11-20.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-63.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-devel@1.6.3-63.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-debuginfo@1.6.3-63.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1-25.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.1.1-25.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.1.1-25.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.1.1-25.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.1.1-25.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.1.1-25.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-devel@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-debuginfo@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-7.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-devel@1.0.6-7.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-debuginfo@1.0.6-7.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-4.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-4.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-4.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-14.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.64.1-14.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.64.1-14.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.64.1-14.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-33.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-33.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-33.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-33.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-33.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.37-33.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-33.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-33.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-33.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-33.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.12-9.Final_redhat_2.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.12-9.Final_redhat_2.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.46-22.redhat_1.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.46-22.redhat_1.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.46-22.redhat_1.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-16.GA.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-16.GA.jbcs.el6?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-20.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-devel@2.11-20.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-debuginfo@2.11-20.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-63.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-devel@1.6.3-63.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-debuginfo@1.6.3-63.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1-25.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.1.1-25.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.1.1-25.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.1.1-25.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.1.1-25.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.1.1-25.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-devel@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-debuginfo@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-7.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-devel@1.0.6-7.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-debuginfo@1.0.6-7.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-4.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-4.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-4.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-14.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.64.1-14.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.64.1-14.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.64.1-14.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-33.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-33.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-33.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-33.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-33.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.37-33.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-33.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-33.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-33.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-33.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.12-9.Final_redhat_2.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.12-9.Final_redhat_2.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.46-22.redhat_1.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.46-22.redhat_1.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.46-22.redhat_1.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-16.GA.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-16.GA.jbcs.el6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-20.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-63.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1-25.jbcs.el6?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-48.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-7.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-4.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-14.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-33.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.12-9.Final_redhat_2.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.46-22.redhat_1.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-16.GA.jbcs.el6?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
                "product": {
                  "name": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
                  "product_id": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.37-33.jbcs.el6?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch"
        },
        "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-0734",
      "cwe": {
        "id": "CWE-385",
        "name": "Covert Timing Channel"
      },
      "discovery_date": "2018-10-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1644364"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: timing side channel attack in the DSA signature algorithm",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-0734"
        },
        {
          "category": "external",
          "summary": "RHBZ#1644364",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-0734",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-0734"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-0734",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0734"
        }
      ],
      "release_date": "2018-10-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl: timing side channel attack in the DSA signature algorithm"
    },
    {
      "cve": "CVE-2018-0737",
      "cwe": {
        "id": "CWE-385",
        "name": "Covert Timing Channel"
      },
      "discovery_date": "2018-04-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1568253"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "OpenSSL RSA key generation was found to be vulnerable to cache side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover parts of the private key.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-0737"
        },
        {
          "category": "external",
          "summary": "RHBZ#1568253",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-0737",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-0737"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-0737",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0737"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2018/04/16/3",
          "url": "http://www.openwall.com/lists/oss-security/2018/04/16/3"
        },
        {
          "category": "external",
          "summary": "https://www.openssl.org/news/secadv/20180416.txt",
          "url": "https://www.openssl.org/news/secadv/20180416.txt"
        }
      ],
      "release_date": "2018-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Alejandro Cabrera Aldaya"
          ],
          "organization": "Universidad Tecnologica de la Habana CUJAE; Cuba"
        },
        {
          "names": [
            "Billy Bob Brumley",
            "Cesar Pereida Garcia",
            "Sohaib ul Hassan"
          ]
        },
        {
          "names": [
            "Nicola Tuveri"
          ],
          "organization": "Tampere University of Technology; Finland"
        }
      ],
      "cve": "CVE-2018-5407",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2018-11-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1645695"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is a timing side-channel flaw on processors which implement SMT/Hyper-Threading architectures. It can result in leakage of secret data in applications such as OpenSSL that has secret dependent control flow at any granularity level. In order to exploit this flaw, the attacker needs to run a malicious process on the same core of the processor as the victim process.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "RHBZ#1645695",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-5407",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "https://github.com/bbbrumley/portsmash",
          "url": "https://github.com/bbbrumley/portsmash"
        },
        {
          "category": "external",
          "summary": "https://www.openssl.org/news/secadv/20181112.txt",
          "url": "https://www.openssl.org/news/secadv/20181112.txt"
        }
      ],
      "release_date": "2018-10-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        },
        {
          "category": "workaround",
          "details": "At this time Red Hat Engineering is working on patches for openssl package in Red Hat Enterprise Linux 7 to address this issue.  Until fixes are available, users are advised to review the guidance supplied in the L1 Terminal Fault vulnerability article: https://access.redhat.com/security/vulnerabilities/L1TF and decide what their exposure across shared CPU threads are and act accordingly.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)"
    },
    {
      "cve": "CVE-2018-17189",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-01-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1668497"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_http2: DoS via slow, unneeded request bodies",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-17189"
        },
        {
          "category": "external",
          "summary": "RHBZ#1668497",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668497"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-17189",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-17189"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17189",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17189"
        }
      ],
      "release_date": "2019-01-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_http2: DoS via slow, unneeded request bodies"
    },
    {
      "cve": "CVE-2018-17199",
      "cwe": {
        "id": "CWE-613",
        "name": "Insufficient Session Expiration"
      },
      "discovery_date": "2019-01-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1668493"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_session_cookie does not respect expiry time",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-17199"
        },
        {
          "category": "external",
          "summary": "RHBZ#1668493",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668493"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-17199",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-17199"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17199",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17199"
        }
      ],
      "release_date": "2019-01-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_session_cookie does not respect expiry time"
    },
    {
      "cve": "CVE-2019-0196",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2019-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1695030"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_http2: read-after-free on a string compare",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0196"
        },
        {
          "category": "external",
          "summary": "RHBZ#1695030",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0196",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0196"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196"
        },
        {
          "category": "external",
          "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
          "url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2019-04-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_http2: read-after-free on a string compare"
    },
    {
      "cve": "CVE-2019-0197",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2019-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1695042"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set \"H2Upgrade on\" are unaffected by this issue.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_http2: possible crash on late upgrade",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0197"
        },
        {
          "category": "external",
          "summary": "RHBZ#1695042",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0197",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0197"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197"
        },
        {
          "category": "external",
          "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
          "url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2019-02-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_http2: possible crash on late upgrade"
    },
    {
      "cve": "CVE-2019-0217",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2019-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1695020"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A race condition was found in mod_auth_digest when the web server was running in a threaded MPM configuration. It could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_auth_digest: access control bypass due to race condition",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Based on the the fact that digest authentication is rarely used in modern day web applications and httpd package shipped with Red Hat products do not ship threaded MPM configuration by default, this flaw has been rated as having Moderate level security impact. Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This flaw has been rated as having a security impact of Moderate, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0217"
        },
        {
          "category": "external",
          "summary": "RHBZ#1695020",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695020"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0217",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0217"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0217",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0217"
        },
        {
          "category": "external",
          "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
          "url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2019-04-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        },
        {
          "category": "workaround",
          "details": "This flaw only affects a threaded server configuration, so using the prefork MPM is an effective mitigation.  In versions of httpd package shipped with Red Hat Enterprise Linux 7, the prefork MPM is the default configuration.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_auth_digest: access control bypass due to race condition"
    },
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for httpd24-httpd and httpd24-nghttp2 is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2949",
        "url": "https://access.redhat.com/errata/RHSA-2019:2949"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2949.json"
      }
    ],
    "title": "Red Hat Security Advisory: httpd24-httpd and httpd24-nghttp2 security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:27:23+00:00",
      "generator": {
        "date": "2024-11-05T21:27:23+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2949",
      "initial_release_date": "2019-10-01T16:14:19+00:00",
      "revision_history": [
        {
          "date": "2019-10-01T16:14:19+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-10-01T16:14:19+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:27:23+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-Alt-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                  "product_id": "7Server-RHSCL-3.3-7.5.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                  "product_id": "7Server-RHSCL-3.3-7.6.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                  "product_id": "7Server-RHSCL-3.3-7.7.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Software Collections"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
                "product": {
                  "name": "httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
                  "product_id": "httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-libnghttp2@1.7.1-7.el6.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
                "product": {
                  "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
                  "product_id": "httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-libnghttp2-devel@1.7.1-7.el6.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
                "product": {
                  "name": "httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
                  "product_id": "httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-nghttp2@1.7.1-7.el6.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
                "product": {
                  "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
                  "product_id": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-nghttp2-debuginfo@1.7.1-7.el6.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
                "product": {
                  "name": "httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
                  "product_id": "httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd@2.4.34-8.el6.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
                "product": {
                  "name": "httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
                  "product_id": "httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-devel@2.4.34-8.el6.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
                "product": {
                  "name": "httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
                  "product_id": "httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-tools@2.4.34-8.el6.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
                "product": {
                  "name": "httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
                  "product_id": "httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_ldap@2.4.34-8.el6.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
                "product": {
                  "name": "httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
                  "product_id": "httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_proxy_html@2.4.34-8.el6.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
                "product": {
                  "name": "httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
                  "product_id": "httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_session@2.4.34-8.el6.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
                "product": {
                  "name": "httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
                  "product_id": "httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_ssl@2.4.34-8.el6.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
                "product": {
                  "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
                  "product_id": "httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-debuginfo@2.4.34-8.el6.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
                "product": {
                  "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
                  "product_id": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-libnghttp2@1.7.1-7.el7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
                "product": {
                  "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
                  "product_id": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-libnghttp2-devel@1.7.1-7.el7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
                "product": {
                  "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
                  "product_id": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-nghttp2@1.7.1-7.el7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
                "product": {
                  "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
                  "product_id": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-nghttp2-debuginfo@1.7.1-7.el7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
                "product": {
                  "name": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
                  "product_id": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd@2.4.34-8.el7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
                "product": {
                  "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
                  "product_id": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-devel@2.4.34-8.el7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
                "product": {
                  "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
                  "product_id": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-tools@2.4.34-8.el7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
                "product": {
                  "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
                  "product_id": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_ldap@2.4.34-8.el7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
                "product": {
                  "name": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
                  "product_id": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_md@2.4.34-8.el7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
                "product": {
                  "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
                  "product_id": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_proxy_html@2.4.34-8.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
                "product": {
                  "name": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
                  "product_id": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_session@2.4.34-8.el7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
                "product": {
                  "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
                  "product_id": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_ssl@2.4.34-8.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
                "product": {
                  "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
                  "product_id": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-debuginfo@2.4.34-8.el7.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd24-nghttp2-0:1.7.1-7.el6.1.src",
                "product": {
                  "name": "httpd24-nghttp2-0:1.7.1-7.el6.1.src",
                  "product_id": "httpd24-nghttp2-0:1.7.1-7.el6.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-nghttp2@1.7.1-7.el6.1?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-0:2.4.34-8.el6.1.src",
                "product": {
                  "name": "httpd24-httpd-0:2.4.34-8.el6.1.src",
                  "product_id": "httpd24-httpd-0:2.4.34-8.el6.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd@2.4.34-8.el6.1?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.src",
                "product": {
                  "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.src",
                  "product_id": "httpd24-nghttp2-0:1.7.1-7.el7.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-nghttp2@1.7.1-7.el7.1?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-0:2.4.34-8.el7.1.src",
                "product": {
                  "name": "httpd24-httpd-0:2.4.34-8.el7.1.src",
                  "product_id": "httpd24-httpd-0:2.4.34-8.el7.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd@2.4.34-8.el7.1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
                "product": {
                  "name": "httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
                  "product_id": "httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-manual@2.4.34-8.el6.1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
                "product": {
                  "name": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
                  "product_id": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-manual@2.4.34-8.el7.1?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
                "product": {
                  "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
                  "product_id": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-libnghttp2@1.7.1-7.el7.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
                "product": {
                  "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
                  "product_id": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-libnghttp2-devel@1.7.1-7.el7.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
                "product": {
                  "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
                  "product_id": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-nghttp2@1.7.1-7.el7.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
                "product": {
                  "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
                  "product_id": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-nghttp2-debuginfo@1.7.1-7.el7.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
                "product": {
                  "name": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
                  "product_id": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd@2.4.34-8.el7.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
                "product": {
                  "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
                  "product_id": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-devel@2.4.34-8.el7.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
                "product": {
                  "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
                  "product_id": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-tools@2.4.34-8.el7.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
                "product": {
                  "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
                  "product_id": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_ldap@2.4.34-8.el7.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
                "product": {
                  "name": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
                  "product_id": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_md@2.4.34-8.el7.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
                "product": {
                  "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
                  "product_id": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_proxy_html@2.4.34-8.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
                "product": {
                  "name": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
                  "product_id": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_session@2.4.34-8.el7.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
                "product": {
                  "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
                  "product_id": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_ssl@2.4.34-8.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
                "product": {
                  "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
                  "product_id": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-debuginfo@2.4.34-8.el7.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
                "product": {
                  "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
                  "product_id": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-libnghttp2@1.7.1-7.el7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
                "product": {
                  "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
                  "product_id": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-libnghttp2-devel@1.7.1-7.el7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
                "product": {
                  "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
                  "product_id": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-nghttp2@1.7.1-7.el7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
                "product": {
                  "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
                  "product_id": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-nghttp2-debuginfo@1.7.1-7.el7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-0:2.4.34-8.el7.1.s390x",
                "product": {
                  "name": "httpd24-httpd-0:2.4.34-8.el7.1.s390x",
                  "product_id": "httpd24-httpd-0:2.4.34-8.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd@2.4.34-8.el7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
                "product": {
                  "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
                  "product_id": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-devel@2.4.34-8.el7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
                "product": {
                  "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
                  "product_id": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-tools@2.4.34-8.el7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
                "product": {
                  "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
                  "product_id": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_ldap@2.4.34-8.el7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
                "product": {
                  "name": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
                  "product_id": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_md@2.4.34-8.el7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
                "product": {
                  "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
                  "product_id": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_proxy_html@2.4.34-8.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
                "product": {
                  "name": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
                  "product_id": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_session@2.4.34-8.el7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
                "product": {
                  "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
                  "product_id": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_ssl@2.4.34-8.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
                "product": {
                  "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
                  "product_id": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-debuginfo@2.4.34-8.el7.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
                "product": {
                  "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
                  "product_id": "httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-libnghttp2@1.7.1-7.el7.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
                "product": {
                  "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
                  "product_id": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-libnghttp2-devel@1.7.1-7.el7.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
                "product": {
                  "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
                  "product_id": "httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-nghttp2@1.7.1-7.el7.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
                "product": {
                  "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
                  "product_id": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-nghttp2-debuginfo@1.7.1-7.el7.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
                "product": {
                  "name": "httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
                  "product_id": "httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd@2.4.34-8.el7.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
                "product": {
                  "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
                  "product_id": "httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-devel@2.4.34-8.el7.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
                "product": {
                  "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
                  "product_id": "httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-tools@2.4.34-8.el7.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
                "product": {
                  "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
                  "product_id": "httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_ldap@2.4.34-8.el7.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
                "product": {
                  "name": "httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
                  "product_id": "httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_md@2.4.34-8.el7.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
                "product": {
                  "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
                  "product_id": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_proxy_html@2.4.34-8.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
                "product": {
                  "name": "httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
                  "product_id": "httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_session@2.4.34-8.el7.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
                "product": {
                  "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
                  "product_id": "httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_ssl@2.4.34-8.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
                "product": {
                  "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
                  "product_id": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-debuginfo@2.4.34-8.el7.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el6.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el6.1.src",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch"
        },
        "product_reference": "httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el6.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el6.1.src",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el6.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el6.1.src",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch"
        },
        "product_reference": "httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el6.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el6.1.src",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.src",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch"
        },
        "product_reference": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.src",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch"
        },
        "product_reference": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch"
        },
        "product_reference": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch"
        },
        "product_reference": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch"
        },
        "product_reference": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.src",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch"
        },
        "product_reference": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.src",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64"
        },
        "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
          "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
          "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
          "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
          "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
          "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
          "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
          "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
          "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
          "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
          "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
          "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T16:14:19+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
            "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
            "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
            "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
            "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
            "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2949"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
            "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
            "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
            "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
            "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
            "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
            "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
            "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
            "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
            "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
            "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
          "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
          "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
          "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
          "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
          "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
          "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
          "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
          "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
          "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
          "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
          "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T16:14:19+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
            "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
            "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
            "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
            "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
            "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2949"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
            "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
            "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
            "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
            "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
            "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
            "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
            "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
            "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
            "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
            "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
          "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
          "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
          "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
          "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
          "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
          "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
          "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
          "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
          "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
          "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
          "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
          "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
          "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
          "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
          "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
          "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T16:14:19+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
            "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
            "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
            "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
            "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
            "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2949"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
            "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
            "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
            "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
            "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
            "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
            "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
            "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
            "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src",
            "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch",
            "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src",
            "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x",
            "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for the nodejs:10 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nThe following packages have been upgraded to a later upstream version: nodejs (10.16.3).\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* HTTP/2: flood using PRIORITY frames results in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)\n\n* HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\n* HTTP/2: flood using empty frames results in excessive resource consumption (CVE-2019-9518)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2925",
        "url": "https://access.redhat.com/errata/RHSA-2019:2925"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1735745",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
      },
      {
        "category": "external",
        "summary": "1735749",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2925.json"
      }
    ],
    "title": "Red Hat Security Advisory: nodejs:10 security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:27:08+00:00",
      "generator": {
        "date": "2024-11-05T21:27:08+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2925",
      "initial_release_date": "2019-09-30T15:15:54+00:00",
      "revision_history": [
        {
          "date": "2019-09-30T15:15:54+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-09-30T15:15:54+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:27:08+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.0.0.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs:10:8000020190911085529:f8e95b4e",
                "product": {
                  "name": "nodejs:10:8000020190911085529:f8e95b4e",
                  "product_id": "nodejs:10:8000020190911085529:f8e95b4e",
                  "product_identification_helper": {
                    "purl": "pkg:rpmmod/redhat/nodejs@10:8000020190911085529:f8e95b4e"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
                "product": {
                  "name": "nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
                  "product_id": "nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-docs@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
                "product": {
                  "name": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
                  "product_id": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-nodemon@1.18.3-1.module%2Bel8%2B2632%2B6c5111ed?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
                "product": {
                  "name": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
                  "product_id": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-packaging@17-3.module%2Bel8%2B2873%2Baa7dfd9a?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
                "product": {
                  "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
                  "product_id": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
                "product": {
                  "name": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
                  "product_id": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-nodemon@1.18.3-1.module%2Bel8%2B2632%2B6c5111ed?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
                "product": {
                  "name": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
                  "product_id": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-packaging@17-3.module%2Bel8%2B2873%2Baa7dfd9a?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                "product": {
                  "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_id": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                "product": {
                  "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_id": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-debuginfo@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                "product": {
                  "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_id": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-debugsource@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                "product": {
                  "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_id": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-devel@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                "product": {
                  "name": "nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_id": "nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-devel-debuginfo@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64",
                "product": {
                  "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_id": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/npm@6.9.0-1.10.16.3.2.module%2Bel8.0.0%2B4214%2B49953fda?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                "product": {
                  "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                  "product_id": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                "product": {
                  "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                  "product_id": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-debuginfo@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                "product": {
                  "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                  "product_id": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-debugsource@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                "product": {
                  "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                  "product_id": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-devel@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
                "product": {
                  "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
                  "product_id": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/npm@6.9.0-1.10.16.3.2.module%2Bel8.0.0%2B4214%2B49953fda?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                "product": {
                  "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_id": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                "product": {
                  "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_id": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-debuginfo@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                "product": {
                  "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_id": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-debugsource@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                "product": {
                  "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_id": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-devel@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
                "product": {
                  "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_id": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/npm@6.9.0-1.10.16.3.2.module%2Bel8.0.0%2B4214%2B49953fda?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                "product": {
                  "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_id": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                "product": {
                  "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_id": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-debuginfo@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                "product": {
                  "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_id": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-debugsource@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                "product": {
                  "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_id": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-devel@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
                "product": {
                  "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_id": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/npm@6.9.0-1.10.16.3.2.module%2Bel8.0.0%2B4214%2B49953fda?arch=aarch64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
        },
        "product_reference": "nodejs:10:8000020190911085529:f8e95b4e",
        "relates_to_product_reference": "AppStream-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64"
        },
        "product_reference": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le"
        },
        "product_reference": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x"
        },
        "product_reference": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src"
        },
        "product_reference": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64"
        },
        "product_reference": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64"
        },
        "product_reference": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le"
        },
        "product_reference": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x"
        },
        "product_reference": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64"
        },
        "product_reference": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64"
        },
        "product_reference": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le"
        },
        "product_reference": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x"
        },
        "product_reference": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64"
        },
        "product_reference": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64"
        },
        "product_reference": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le"
        },
        "product_reference": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x"
        },
        "product_reference": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64"
        },
        "product_reference": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64"
        },
        "product_reference": "nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch"
        },
        "product_reference": "nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch"
        },
        "product_reference": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src"
        },
        "product_reference": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch"
        },
        "product_reference": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src"
        },
        "product_reference": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64"
        },
        "product_reference": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le"
        },
        "product_reference": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x"
        },
        "product_reference": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        },
        "product_reference": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-5737",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-03-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1690808"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that the original fix for Slowloris, CVE-2018-12122, was insufficient. It is possible to bypass the server\u0027s headersTimeout by sending two specially crafted HTTP requests in the same connection. An attacker could use this flaw to bypass Slowloris protection, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5737"
        },
        {
          "category": "external",
          "summary": "RHBZ#1690808",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1690808"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5737",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5737"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5737",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5737"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/ja/blog/vulnerability/february-2019-security-releases/",
          "url": "https://nodejs.org/ja/blog/vulnerability/february-2019-security-releases/"
        }
      ],
      "release_date": "2019-02-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-30T15:15:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2925"
        },
        {
          "category": "workaround",
          "details": "The use of a Load Balancer or a Reverse Proxy will increase the difficulty of the attack.",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass"
    },
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-30T15:15:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2925"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-30T15:15:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2925"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-30T15:15:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2925"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-30T15:15:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2925"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9515",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735745"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735745",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-30T15:15:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2925"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-30T15:15:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2925"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-30T15:15:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2925"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9518",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735749"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using frames with an empty payload, a flood could occur that results in excessive CPU usage and starvation of other clients. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using empty frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735749",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9518",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-30T15:15:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2925"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using empty frames results in excessive resource consumption"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for Red Hat JBoss Enterprise Application Platform 7.2.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.\n\nThis release of Red Hat JBoss Enterprise Application Platform 7.2.5 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.2.4, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.2.5 Release Notes for information about the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* undertow: HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* undertow: HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* undertow: HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* undertow: HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* wildfly-core: Incorrect privileges for \u0027Monitor\u0027, \u0027Auditor\u0027 and \u0027Deployer\u0027 user by default (CVE-2019-14838)\n\n* wildfly: wildfly-security-manager: security manager authorization bypass (CVE-2019-14843)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:4021",
        "url": "https://access.redhat.com/errata/RHSA-2019:4021"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=7.2",
        "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=7.2"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1735745",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1751227",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1751227"
      },
      {
        "category": "external",
        "summary": "1752980",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752980"
      },
      {
        "category": "external",
        "summary": "JBEAP-17075",
        "url": "https://issues.redhat.com/browse/JBEAP-17075"
      },
      {
        "category": "external",
        "summary": "JBEAP-17220",
        "url": "https://issues.redhat.com/browse/JBEAP-17220"
      },
      {
        "category": "external",
        "summary": "JBEAP-17365",
        "url": "https://issues.redhat.com/browse/JBEAP-17365"
      },
      {
        "category": "external",
        "summary": "JBEAP-17476",
        "url": "https://issues.redhat.com/browse/JBEAP-17476"
      },
      {
        "category": "external",
        "summary": "JBEAP-17478",
        "url": "https://issues.redhat.com/browse/JBEAP-17478"
      },
      {
        "category": "external",
        "summary": "JBEAP-17483",
        "url": "https://issues.redhat.com/browse/JBEAP-17483"
      },
      {
        "category": "external",
        "summary": "JBEAP-17495",
        "url": "https://issues.redhat.com/browse/JBEAP-17495"
      },
      {
        "category": "external",
        "summary": "JBEAP-17496",
        "url": "https://issues.redhat.com/browse/JBEAP-17496"
      },
      {
        "category": "external",
        "summary": "JBEAP-17513",
        "url": "https://issues.redhat.com/browse/JBEAP-17513"
      },
      {
        "category": "external",
        "summary": "JBEAP-17521",
        "url": "https://issues.redhat.com/browse/JBEAP-17521"
      },
      {
        "category": "external",
        "summary": "JBEAP-17523",
        "url": "https://issues.redhat.com/browse/JBEAP-17523"
      },
      {
        "category": "external",
        "summary": "JBEAP-17547",
        "url": "https://issues.redhat.com/browse/JBEAP-17547"
      },
      {
        "category": "external",
        "summary": "JBEAP-17548",
        "url": "https://issues.redhat.com/browse/JBEAP-17548"
      },
      {
        "category": "external",
        "summary": "JBEAP-17560",
        "url": "https://issues.redhat.com/browse/JBEAP-17560"
      },
      {
        "category": "external",
        "summary": "JBEAP-17579",
        "url": "https://issues.redhat.com/browse/JBEAP-17579"
      },
      {
        "category": "external",
        "summary": "JBEAP-17582",
        "url": "https://issues.redhat.com/browse/JBEAP-17582"
      },
      {
        "category": "external",
        "summary": "JBEAP-17631",
        "url": "https://issues.redhat.com/browse/JBEAP-17631"
      },
      {
        "category": "external",
        "summary": "JBEAP-17647",
        "url": "https://issues.redhat.com/browse/JBEAP-17647"
      },
      {
        "category": "external",
        "summary": "JBEAP-17665",
        "url": "https://issues.redhat.com/browse/JBEAP-17665"
      },
      {
        "category": "external",
        "summary": "JBEAP-17722",
        "url": "https://issues.redhat.com/browse/JBEAP-17722"
      },
      {
        "category": "external",
        "summary": "JBEAP-17874",
        "url": "https://issues.redhat.com/browse/JBEAP-17874"
      },
      {
        "category": "external",
        "summary": "JBEAP-17880",
        "url": "https://issues.redhat.com/browse/JBEAP-17880"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_4021.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.5 security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:37:53+00:00",
      "generator": {
        "date": "2024-11-05T21:37:53+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:4021",
      "initial_release_date": "2019-11-26T19:58:39+00:00",
      "revision_history": [
        {
          "date": "2019-11-26T19:58:39+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-11-26T19:58:39+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:37:53+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss EAP 7.2",
                "product": {
                  "name": "Red Hat JBoss EAP 7.2",
                  "product_id": "Red Hat JBoss EAP 7.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Enterprise Application Platform"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss EAP 7.2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T19:58:39+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).\n\nThe JBoss server process must be restarted for the update to take effect.",
          "product_ids": [
            "Red Hat JBoss EAP 7.2"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4021"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat JBoss EAP 7.2"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss EAP 7.2"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss EAP 7.2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T19:58:39+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).\n\nThe JBoss server process must be restarted for the update to take effect.",
          "product_ids": [
            "Red Hat JBoss EAP 7.2"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss EAP 7.2"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss EAP 7.2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T19:58:39+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).\n\nThe JBoss server process must be restarted for the update to take effect.",
          "product_ids": [
            "Red Hat JBoss EAP 7.2"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss EAP 7.2"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9515",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735745"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss EAP 7.2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735745",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T19:58:39+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).\n\nThe JBoss server process must be restarted for the update to take effect.",
          "product_ids": [
            "Red Hat JBoss EAP 7.2"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss EAP 7.2"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "F\u00e1bio Magalh\u00e3es de Andrade"
          ],
          "organization": "Sonda Ativas"
        },
        {
          "names": [
            "Juliano de Castro Santos",
            "Leonard Lunardi"
          ],
          "organization": "UnimedBH"
        }
      ],
      "cve": "CVE-2019-14838",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2019-08-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1751227"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that Wildfly users had default user permissions set incorrectly. A malicious user could use this flaw to access unauthorized controls for the application server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly-core: Incorrect privileges for \u0027Monitor\u0027, \u0027Auditor\u0027 and \u0027Deployer\u0027 user by default",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss EAP 7.2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14838"
        },
        {
          "category": "external",
          "summary": "RHBZ#1751227",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1751227"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14838",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14838"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14838",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14838"
        },
        {
          "category": "external",
          "summary": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14838",
          "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14838"
        }
      ],
      "release_date": "2019-10-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T19:58:39+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).\n\nThe JBoss server process must be restarted for the update to take effect.",
          "product_ids": [
            "Red Hat JBoss EAP 7.2"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss EAP 7.2"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wildfly-core: Incorrect privileges for \u0027Monitor\u0027, \u0027Auditor\u0027 and \u0027Deployer\u0027 user by default"
    },
    {
      "cve": "CVE-2019-14843",
      "cwe": {
        "id": "CWE-592",
        "name": "CWE-592"
      },
      "discovery_date": "2019-09-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1752980"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly-security-manager: security manager authorization bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss EAP 7.2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14843"
        },
        {
          "category": "external",
          "summary": "RHBZ#1752980",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752980"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14843",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14843"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14843",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14843"
        }
      ],
      "release_date": "2019-09-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T19:58:39+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).\n\nThe JBoss server process must be restarted for the update to take effect.",
          "product_ids": [
            "Red Hat JBoss EAP 7.2"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4021"
        },
        {
          "category": "workaround",
          "details": "This flaw only affects the Security Manager running under JDK 11 or 8. To mitigate exposure to this flaw, do not run under those JDK versions.",
          "product_ids": [
            "Red Hat JBoss EAP 7.2"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss EAP 7.2"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "wildfly-security-manager: security manager authorization bypass"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for Red Hat build of Thorntail.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. For more information, see the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release of Red Hat build of Thorntail 2.5.1 includes security updates, bug fixes, and enhancements. For more information, see the release notes page listed in the References section.\n\nSecurity Fix(es):\n\n* apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default (CVE-2019-10086)\n\n* cxf: does not restrict the number of message attachments (CVE-2019-12406)\n\n* cxf: OpenId Connect token service does not properly validate the clientId (CVE-2019-12419)\n\n* hibernate-validator: safeHTML validator allows XSS (CVE-2019-10219)\n\n* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* jackson-databind: Multiple serialization gadgets (CVE-2019-17531, CVE-2019-16943, CVE-2019-16942, CVE-2019-17267, CVE-2019-14540, CVE-2019-16335, CVE-2019-14893, CVE-2019-14892, CVE-2020-9546, CVE-2020-9547, CVE-2020-9548, CVE-2020-10969, CVE-2020-10968, CVE-2020-11111, CVE-2020-11112, CVE-2020-11113, CVE-2020-11619, CVE-2020-11620, CVE-2019-20330, CVE-2020-8840)\n\n* jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command \nexecution (CVE-2020-10672, CVE-2020-10673)\n\n* keycloak: adapter endpoints are exposed via arbitrary URLs (CVE-2019-14820)\n\n* keycloak: missing signatures validation on CRL used to verify client certificates (CVE-2019-3875)\n\n* keycloak: SAML broker does not check existence of signature on document allowing any user impersonation (CVE-2019-10201)\n\n* keycloak: CSRF check missing in My Resources functionality in the Account Console (CVE-2019-10199)\n\n* keycloak: cross-realm user access auth bypass (CVE-2019-14832)\n\n* netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling (CVE-2020-7238)\n\n* SmallRye: SecuritySupport class is incorrectly public and contains a static method to access the current threads context class loader (CVE-2020-1729)\n\n* thrift: Out-of-bounds read related to TJSONProtocol or TSimpleJSONProtocol (CVE-2019-0210)\n\n* thrift: Endless loop when feed with specific input data (CVE-2019-0205)\n\n* undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS (CVE-2019-14888)\n\n* wildfly: The \u0027enabled-protocols\u0027 value in legacy security is not respected if OpenSSL security provider is in use (CVE-2019-14887)\n\n* wildfly-core: Incorrect privileges for \u0027Monitor\u0027, \u0027Auditor\u0027 and \u0027Deployer\u0027 user by default (CVE-2019-14838)\n\n* xml-security: Apache Santuario potentially loads XML parsing code from an untrusted source (CVE-2019-12400)\n\nFor more details about the security issues and their impact, the CVSS score, acknowledgements, and other related information, see the CVE pages listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2020:2067",
        "url": "https://access.redhat.com/errata/RHSA-2020:2067"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=catRhoar.thorntail\u0026version=2.5.1",
        "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=catRhoar.thorntail\u0026version=2.5.1"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_build_of_thorntail/2.5/html/release_notes_for_thorntail_2.5/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_build_of_thorntail/2.5/html/release_notes_for_thorntail_2.5/"
      },
      {
        "category": "external",
        "summary": "1649870",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1649870"
      },
      {
        "category": "external",
        "summary": "1690628",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1690628"
      },
      {
        "category": "external",
        "summary": "1728609",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728609"
      },
      {
        "category": "external",
        "summary": "1729261",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1729261"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1735745",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
      },
      {
        "category": "external",
        "summary": "1738673",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738673"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1749487",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1749487"
      },
      {
        "category": "external",
        "summary": "1751227",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1751227"
      },
      {
        "category": "external",
        "summary": "1755831",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1755831"
      },
      {
        "category": "external",
        "summary": "1755849",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1755849"
      },
      {
        "category": "external",
        "summary": "1758167",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758167"
      },
      {
        "category": "external",
        "summary": "1758171",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758171"
      },
      {
        "category": "external",
        "summary": "1758182",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758182"
      },
      {
        "category": "external",
        "summary": "1758187",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758187"
      },
      {
        "category": "external",
        "summary": "1758191",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758191"
      },
      {
        "category": "external",
        "summary": "1764607",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764607"
      },
      {
        "category": "external",
        "summary": "1764612",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764612"
      },
      {
        "category": "external",
        "summary": "1764658",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764658"
      },
      {
        "category": "external",
        "summary": "1767483",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1767483"
      },
      {
        "category": "external",
        "summary": "1772008",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1772008"
      },
      {
        "category": "external",
        "summary": "1772464",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1772464"
      },
      {
        "category": "external",
        "summary": "1775293",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1775293"
      },
      {
        "category": "external",
        "summary": "1793154",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793154"
      },
      {
        "category": "external",
        "summary": "1796225",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1796225"
      },
      {
        "category": "external",
        "summary": "1802444",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1802444"
      },
      {
        "category": "external",
        "summary": "1815470",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1815470"
      },
      {
        "category": "external",
        "summary": "1815495",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1815495"
      },
      {
        "category": "external",
        "summary": "1816170",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816170"
      },
      {
        "category": "external",
        "summary": "1816175",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816175"
      },
      {
        "category": "external",
        "summary": "1816330",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816330"
      },
      {
        "category": "external",
        "summary": "1816332",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816332"
      },
      {
        "category": "external",
        "summary": "1816337",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816337"
      },
      {
        "category": "external",
        "summary": "1816340",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816340"
      },
      {
        "category": "external",
        "summary": "1819208",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1819208"
      },
      {
        "category": "external",
        "summary": "1819212",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1819212"
      },
      {
        "category": "external",
        "summary": "1821304",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1821304"
      },
      {
        "category": "external",
        "summary": "1821311",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1821311"
      },
      {
        "category": "external",
        "summary": "1821315",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1821315"
      },
      {
        "category": "external",
        "summary": "1826798",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826798"
      },
      {
        "category": "external",
        "summary": "1826805",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826805"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2067.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat build of Thorntail 2.5.1 security and bug fix update",
    "tracking": {
      "current_release_date": "2024-11-05T22:13:59+00:00",
      "generator": {
        "date": "2024-11-05T22:13:59+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2020:2067",
      "initial_release_date": "2020-05-18T10:24:57+00:00",
      "revision_history": [
        {
          "date": "2020-05-18T10:24:57+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-05-18T10:24:57+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T22:13:59+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Text-Only RHOAR",
                "product": {
                  "name": "Text-Only RHOAR",
                  "product_id": "Text-Only RHOAR",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_application_runtimes:1.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Application Runtimes"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-0205",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-10-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764612"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "thrift: Endless loop when feed with specific input data",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains a vulnerable version of libthrift. However, OpenDaylight does not expose libthrift in a vulnerable way, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nThe thrift package in OpenShift Container Platform is installed only in Curator images in the Logging stack. The affected code is included in this package, it\u0027s functionality is not used. This vulnerability is therefore rated Low for OpenShift Container Platform.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0205"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764612",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764612"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0205",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0205"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0205",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0205"
        }
      ],
      "release_date": "2019-10-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "thrift: Endless loop when feed with specific input data"
    },
    {
      "cve": "CVE-2019-0210",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2019-10-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764607"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "thrift: Out-of-bounds read related to TJSONProtocol or TSimpleJSONProtocol",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains a vulnerable version of libthrift. However, OpenDaylight is not affected as this is a Golang specific problem, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nThe version of thrift delivered in OpenShift Container Platform is not affected by this vulnerability as it does not contain the affected code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0210"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764607",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764607"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0210",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0210"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0210",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0210"
        }
      ],
      "release_date": "2019-10-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "thrift: Out-of-bounds read related to TJSONProtocol or TSimpleJSONProtocol"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Marek Posolda"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2019-3875",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2019-03-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1690628"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in keycloak before 6.0.2. The X.509 authenticator supports the verification of client certificates through the CRL, where the CRL list can be obtained from the URL provided in the certificate itself (CDP) or through the separately configured path. The CRL are often available over the network through unsecured protocols (\u0027http\u0027 or \u0027ldap\u0027) and hence the caller should verify the signature and possibly the certification path. Keycloak currently doesn\u0027t validate signatures on CRL, which can result in a possibility of various attacks like man-in-the-middle.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak: missing signatures validation on CRL used to verify client certificates",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-3875"
        },
        {
          "category": "external",
          "summary": "RHBZ#1690628",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1690628"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-3875",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-3875"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-3875",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3875"
        }
      ],
      "release_date": "2019-06-11T14:22:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak: missing signatures validation on CRL used to verify client certificates"
    },
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9515",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735745"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735745",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth"
    },
    {
      "cve": "CVE-2019-10086",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2019-10-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1767483"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Apache Commons BeanUtils, where the class property in PropertyUtilsBean is not suppressed by default. This flaw allows an attacker to access the classloader.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10086"
        },
        {
          "category": "external",
          "summary": "RHBZ#1767483",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1767483"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10086",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10086"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10086",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10086"
        },
        {
          "category": "external",
          "summary": "https://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.4/RELEASE-NOTES.txt",
          "url": "https://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.4/RELEASE-NOTES.txt"
        }
      ],
      "release_date": "2019-08-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "There is no currently known mitigation for this flaw.",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default"
    },
    {
      "cve": "CVE-2019-10199",
      "cwe": {
        "id": "CWE-352",
        "name": "Cross-Site Request Forgery (CSRF)"
      },
      "discovery_date": "2019-07-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1729261"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that Keycloak\u0027s account console did not perform adequate header checks in some requests. An attacker could use this flaw to trick an authenticated user into performing operations via request from an untrusted domain.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak: CSRF check missing in My Resources functionality in the Account Console",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10199"
        },
        {
          "category": "external",
          "summary": "RHBZ#1729261",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1729261"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10199",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10199"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10199",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10199"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak: CSRF check missing in My Resources functionality in the Account Console"
    },
    {
      "cve": "CVE-2019-10201",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "discovery_date": "2019-07-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1728609"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that Keycloak\u0027s SAML broker did not verify missing message signatures. If an attacker modifies the SAML Response and removes the \u003cSignature\u003e sections, the message is still accepted, and the message can be modified. An attacker could use this flaw to impersonate other users and gain access to sensitive information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak: SAML broker does not check existence of signature on document allowing any user impersonation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10201"
        },
        {
          "category": "external",
          "summary": "RHBZ#1728609",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728609"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10201",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10201"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10201",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10201"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "Administrator can prevent this issue for POST binding by requiring signed assertions.",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "keycloak: SAML broker does not check existence of signature on document allowing any user impersonation"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Dominik Mizyn"
          ],
          "organization": "Samsung R\u0026D Institute Poland"
        }
      ],
      "cve": "CVE-2019-10219",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2019-05-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1738673"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "hibernate-validator: safeHTML validator allows XSS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform\u0027s OpenDaylight will not be updated for this flaw because it is being deprecated and is only receiving security fixes for Important and Critical flaws.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10219"
        },
        {
          "category": "external",
          "summary": "RHBZ#1738673",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738673"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10219",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10219"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10219",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10219"
        }
      ],
      "release_date": "2019-08-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "hibernate-validator: safeHTML validator allows XSS"
    },
    {
      "cve": "CVE-2019-12400",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2019-08-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1764658"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders. However, if some untrusted code can register a malicious implementation with the thread context class loader first, then this implementation might be cached and re-used by Apache Santuario - XML Security for Java, leading to potential security flaws when validating signed documents, etc. The vulnerability affects Apache Santuario - XML Security for Java 2.0.x releases from 2.0.3 and all 2.1.x releases before 2.1.4.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xml-security: Apache Santuario potentially loads XML parsing code from an untrusted source",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-12400"
        },
        {
          "category": "external",
          "summary": "RHBZ#1764658",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764658"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-12400",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-12400"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12400",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12400"
        }
      ],
      "release_date": "2019-08-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "xml-security: Apache Santuario potentially loads XML parsing code from an untrusted source"
    },
    {
      "cve": "CVE-2019-12406",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2020-03-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1816170"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Apache CXF before 3.3.4 and 3.2.11 does not restrict the number of message attachments present in a given message. This leaves open the possibility of a denial of service type attack, where a malicious user crafts a message containing a very large number of message attachments. From the 3.3.4 and 3.2.11 releases, a default limit of 50 message attachments is enforced. This is configurable via the message property \"attachment-max-count\".",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "cxf: does not restrict the number of message attachments",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-12406"
        },
        {
          "category": "external",
          "summary": "RHBZ#1816170",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816170"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-12406",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-12406"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12406",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12406"
        }
      ],
      "release_date": "2019-11-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "cxf: does not restrict the number of message attachments"
    },
    {
      "cve": "CVE-2019-12419",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "discovery_date": "2020-03-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1816175"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in cxf in versions prior to 3.2.11 and 3.3.4. The access token services do not properly validate that an authenticated principal is equal to that of the supplied clientId parameter allowing a malicious client to use an authorization code that has been issued to a different client as their own. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "cxf: OpenId Connect token service does not properly validate the clientId",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In OpenShift Logging the openshift-logging/elasticsearch6-rhel8 container bundles the vulnerable version of apache-cxf, but the vulnerable class is not shipped, hence this component is not affected by this vulnerability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-12419"
        },
        {
          "category": "external",
          "summary": "RHBZ#1816175",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816175"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-12419",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-12419"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12419",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12419"
        }
      ],
      "release_date": "2019-11-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "cxf: OpenId Connect token service does not properly validate the clientId"
    },
    {
      "cve": "CVE-2019-14540",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-09-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1755849"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nSatellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14540"
        },
        {
          "category": "external",
          "summary": "RHBZ#1755849",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1755849"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14540",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14540"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14540",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14540"
        }
      ],
      "release_date": "2019-09-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "This vulnerability relies on com.zaxxer.hikari.HikariConfig being present in the application\u0027s ClassPath. Hikari is not packaged as an RPM for Red Hat Enterprise Linux or Red Hat Software Collections. Applications using jackson-databind that do not also use com.zaxxer.hikari are not impacted by this vulnerability.\n\nA mitigation to this class of problem in jackson-databind is to not trigger polymorphic desrialization globally by using: objectMapper.enableDefaultTyping() and rather use @JsonTypeInfo on the class property to explicitly define the type information. For more information on this issue please refer to https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig"
    },
    {
      "cve": "CVE-2019-14820",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2018-11-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1649870"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that keycloak exposes internal adapter endpoints in org.keycloak.constants.AdapterConstants, which can be invoked via a specially-crafted URL. This vulnerability could allow an attacker to access unauthorized information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak: adapter endpoints are exposed via arbitrary URLs",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14820"
        },
        {
          "category": "external",
          "summary": "RHBZ#1649870",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1649870"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14820",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14820"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14820",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14820"
        }
      ],
      "release_date": "2019-10-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "keycloak: adapter endpoints are exposed via arbitrary URLs"
    },
    {
      "cve": "CVE-2019-14832",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "discovery_date": "2019-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1749487"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Keycloak REST API where it would permit user access from a realm the user was not configured. An authenticated attacker with knowledge of a user id could use this flaw to access unauthorized information or to carry out further attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak: cross-realm user access auth bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14832"
        },
        {
          "category": "external",
          "summary": "RHBZ#1749487",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1749487"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14832",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14832"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14832",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14832"
        }
      ],
      "release_date": "2019-10-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak: cross-realm user access auth bypass"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "F\u00e1bio Magalh\u00e3es de Andrade"
          ],
          "organization": "Sonda Ativas"
        },
        {
          "names": [
            "Juliano de Castro Santos",
            "Leonard Lunardi"
          ],
          "organization": "UnimedBH"
        }
      ],
      "cve": "CVE-2019-14838",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2019-08-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1751227"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that Wildfly users had default user permissions set incorrectly. A malicious user could use this flaw to access unauthorized controls for the application server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly-core: Incorrect privileges for \u0027Monitor\u0027, \u0027Auditor\u0027 and \u0027Deployer\u0027 user by default",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14838"
        },
        {
          "category": "external",
          "summary": "RHBZ#1751227",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1751227"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14838",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14838"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14838",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14838"
        },
        {
          "category": "external",
          "summary": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14838",
          "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14838"
        }
      ],
      "release_date": "2019-10-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wildfly-core: Incorrect privileges for \u0027Monitor\u0027, \u0027Auditor\u0027 and \u0027Deployer\u0027 user by default"
    },
    {
      "cve": "CVE-2019-14887",
      "cwe": {
        "id": "CWE-757",
        "name": "Selection of Less-Secure Algorithm During Negotiation (\u0027Algorithm Downgrade\u0027)"
      },
      "discovery_date": "2019-11-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1772008"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found when an OpenSSL security provider is used with Wildfly, the \u0027enabled-protocols\u0027 value in the Wildfly configuration isn\u0027t honored. An attacker could target the traffic sent from Wildfly and downgrade the connection to a weaker version of TLS, potentially breaking the encryption.  This could lead to a leak of the data being passed over the network.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly: The \u0027enabled-protocols\u0027 value in legacy security is not respected if OpenSSL security provider is in use",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14887"
        },
        {
          "category": "external",
          "summary": "RHBZ#1772008",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1772008"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14887",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14887"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14887",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14887"
        }
      ],
      "release_date": "2020-03-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "Avoid using an OpenSSL security provider and instead use the default configuration or regular JSSE provider with \u0027TLS\u0027.",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wildfly: The \u0027enabled-protocols\u0027 value in legacy security is not respected if OpenSSL security provider is in use"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Henning Baldersheim",
            "H\u00e5vard Pettersen"
          ],
          "organization": "Verizon Media"
        }
      ],
      "cve": "CVE-2019-14888",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-10-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1772464"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in the Undertow HTTP server listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service (DOS) to make the service unavailable on SSL.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14888"
        },
        {
          "category": "external",
          "summary": "RHBZ#1772464",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1772464"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14888",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14888"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14888",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14888"
        }
      ],
      "release_date": "2020-01-20T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "Enable HTTP2 (enable-http2=\"true\") in the undertow\u0027s HTTPS settings.",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS"
    },
    {
      "cve": "CVE-2019-14892",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-09-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1758171"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization of a malicious object using commons-configuration 1 and 2 JNDI classes. An attacker could use this flaw to execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in classes of the commons-configuration package",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Satellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14892"
        },
        {
          "category": "external",
          "summary": "RHBZ#1758171",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758171"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14892",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14892"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14892",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14892"
        }
      ],
      "release_date": "2019-09-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in classes of the commons-configuration package"
    },
    {
      "cve": "CVE-2019-14893",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-09-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1758182"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in classes of the xalan package",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Satellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14893"
        },
        {
          "category": "external",
          "summary": "RHBZ#1758182",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758182"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14893",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14893"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14893",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14893"
        }
      ],
      "release_date": "2019-09-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in classes of the xalan package"
    },
    {
      "cve": "CVE-2019-16335",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-09-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1755831"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nSatellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-16335"
        },
        {
          "category": "external",
          "summary": "RHBZ#1755831",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1755831"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-16335",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-16335"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-16335",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16335"
        }
      ],
      "release_date": "2019-09-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "This vulnerability relies on com.zaxxer.hikari.HikariDataSource being present in the application\u0027s ClassPath. Hikari is not packaged as an RPM for Red Hat Enterprise Linux or Red Hat Software Collections. Applications using jackson-databind that do not also use com.zaxxer.hikari are not impacted by this vulnerability.\n\nA mitigation to this class of problem in jackson-databind is to not trigger polymorphic desrialization globally by using: objectMapper.enableDefaultTyping() and rather use @JsonTypeInfo on the class property to explicitly define the type information. For more information on this issue please refer to https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource"
    },
    {
      "cve": "CVE-2019-16942",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-09-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1758187"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Satellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-16942"
        },
        {
          "category": "external",
          "summary": "RHBZ#1758187",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758187"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-16942",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-16942"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-16942",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16942"
        }
      ],
      "release_date": "2019-09-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*"
    },
    {
      "cve": "CVE-2019-16943",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-09-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1758191"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of com.p6spy.engine.spy.P6DataSource mishandling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Satellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-16943"
        },
        {
          "category": "external",
          "summary": "RHBZ#1758191",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758191"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-16943",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-16943"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-16943",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16943"
        }
      ],
      "release_date": "2019-09-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource"
    },
    {
      "cve": "CVE-2019-17267",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-09-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1758167"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in classes of the ehcache package",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nRed Hat OpenShift Container Platform does ship the vulnerable component, but does not enable the unsafe conditions needed to exploit, lowering their vulnerability impact.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-17267"
        },
        {
          "category": "external",
          "summary": "RHBZ#1758167",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758167"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-17267",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-17267"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17267",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17267"
        }
      ],
      "release_date": "2019-09-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in classes of the ehcache package"
    },
    {
      "cve": "CVE-2019-17531",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2019-11-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1775293"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Satellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenShift Container Platform does ship the vulnerable component, but does not enable the unsafe conditions needed to exploit, lowering their vulnerability impact.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-17531"
        },
        {
          "category": "external",
          "summary": "RHBZ#1775293",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1775293"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-17531",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-17531"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17531",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17531"
        }
      ],
      "release_date": "2019-10-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*"
    },
    {
      "cve": "CVE-2019-20330",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-01-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1793154"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: lacks certain net.sf.ehcache blocking",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-20330"
        },
        {
          "category": "external",
          "summary": "RHBZ#1793154",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793154"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20330",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-20330"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20330",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20330"
        }
      ],
      "release_date": "2020-01-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: lacks certain net.sf.ehcache blocking"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Darran Lofthouse"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2020-1729",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "discovery_date": "2019-09-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1802444"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in SmallRye\u0027s API through version 1.6.1. The API can allow other code running within the application server to potentially obtain the ClassLoader, bypassing any permissions checks that should have been applied. The largest threat from this vulnerability is a threat to data confidentiality.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "SmallRye: SecuritySupport class is incorrectly public and contains a static method to access the current threads context class loader",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-1729"
        },
        {
          "category": "external",
          "summary": "RHBZ#1802444",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1802444"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1729",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-1729"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1729",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1729"
        }
      ],
      "release_date": "2020-02-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "SmallRye: SecuritySupport class is incorrectly public and contains a static method to access the current threads context class loader"
    },
    {
      "cve": "CVE-2020-7238",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2020-01-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1796225"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty, where it mishandles Transfer-Encoding whitespace. This flaw allows HTTP Request Smuggling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that the previous vulnerability, CVE-2019-16869, does not poses a substantial practical threat to ElasticSearch 6 [1]. We agree that this issue would be difficult to exploit both these vulnerabilities on OpenShift Container Platform, so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships vulnerable netty version embedded in Candlepin, however, is not directly vulnerable since HTTP requests are handled by Tomcat and not netty.\n\n[1]  https://github.com/elastic/elasticsearch/issues/49396",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-7238"
        },
        {
          "category": "external",
          "summary": "RHBZ#1796225",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1796225"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-7238",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-7238"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7238",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7238"
        },
        {
          "category": "external",
          "summary": "https://netty.io/news/2019/12/18/4-1-44-Final.html",
          "url": "https://netty.io/news/2019/12/18/4-1-44-Final.html"
        }
      ],
      "release_date": "2020-01-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling"
    },
    {
      "cve": "CVE-2020-8840",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1816330"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in FasterXML jackson-databind in versions 2.0.0 through 2.9.10.2. A \"gadget\" exploit is possible due to a lack of a Java object being blocking from being deserialized. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Lacks certain xbean-reflect/JNDI blocking",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-8840"
        },
        {
          "category": "external",
          "summary": "RHBZ#1816330",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816330"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-8840",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-8840"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8840",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8840"
        }
      ],
      "release_date": "2020-03-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: Lacks certain xbean-reflect/JNDI blocking"
    },
    {
      "cve": "CVE-2020-9546",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1816332"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in shaded-hikari-config",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-9546"
        },
        {
          "category": "external",
          "summary": "RHBZ#1816332",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816332"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-9546",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-9546"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-9546",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9546"
        }
      ],
      "release_date": "2020-03-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in shaded-hikari-config"
    },
    {
      "cve": "CVE-2020-9547",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1816337"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in ibatis-sqlmap",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-9547"
        },
        {
          "category": "external",
          "summary": "RHBZ#1816337",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816337"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-9547",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-9547"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-9547",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9547"
        }
      ],
      "release_date": "2020-03-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in ibatis-sqlmap"
    },
    {
      "cve": "CVE-2020-9548",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1816340"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in anteros-core",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-9548"
        },
        {
          "category": "external",
          "summary": "RHBZ#1816340",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816340"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-9548",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-9548"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-9548",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9548"
        }
      ],
      "release_date": "2020-03-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in anteros-core"
    },
    {
      "cve": "CVE-2020-10672",
      "cwe": {
        "id": "CWE-96",
        "name": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)"
      },
      "discovery_date": "2020-03-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1815495"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-10672"
        },
        {
          "category": "external",
          "summary": "RHBZ#1815495",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1815495"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-10672",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-10672"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10672",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10672"
        }
      ],
      "release_date": "2020-03-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution"
    },
    {
      "cve": "CVE-2020-10673",
      "cwe": {
        "id": "CWE-96",
        "name": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)"
      },
      "discovery_date": "2020-03-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1815470"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time. Additionally, the gadget is not available within Red Hat Openstack Platform\u0027s OpenDaylight.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-10673"
        },
        {
          "category": "external",
          "summary": "RHBZ#1815470",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1815470"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-10673",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-10673"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10673",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10673"
        }
      ],
      "release_date": "2020-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution"
    },
    {
      "cve": "CVE-2020-10968",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-03-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1819208"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x prior to version 2.9.10.4.  The interaction between serialization gadgets and typing is mishandled in the bus-proxy. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-10968"
        },
        {
          "category": "external",
          "summary": "RHBZ#1819208",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1819208"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-10968",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-10968"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10968",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10968"
        }
      ],
      "release_date": "2020-03-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider"
    },
    {
      "cve": "CVE-2020-10969",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-03-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1819212"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in javax.swing.JEditorPane",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-10969"
        },
        {
          "category": "external",
          "summary": "RHBZ#1819212",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1819212"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-10969",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-10969"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10969",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10969"
        }
      ],
      "release_date": "2020-03-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in javax.swing.JEditorPane"
    },
    {
      "cve": "CVE-2020-11111",
      "cwe": {
        "id": "CWE-96",
        "name": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)"
      },
      "discovery_date": "2020-03-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1821304"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-11111"
        },
        {
          "category": "external",
          "summary": "RHBZ#1821304",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1821304"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-11111",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-11111"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11111",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11111"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-databind/issues/2664",
          "url": "https://github.com/FasterXML/jackson-databind/issues/2664"
        }
      ],
      "release_date": "2020-03-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory"
    },
    {
      "cve": "CVE-2020-11112",
      "cwe": {
        "id": "CWE-96",
        "name": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)"
      },
      "discovery_date": "2020-03-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1821311"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-11112"
        },
        {
          "category": "external",
          "summary": "RHBZ#1821311",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1821311"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-11112",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-11112"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11112",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11112"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-databind/issues/2666",
          "url": "https://github.com/FasterXML/jackson-databind/issues/2666"
        }
      ],
      "release_date": "2020-03-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider"
    },
    {
      "cve": "CVE-2020-11113",
      "cwe": {
        "id": "CWE-96",
        "name": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)"
      },
      "discovery_date": "2020-03-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1821315"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-11113"
        },
        {
          "category": "external",
          "summary": "RHBZ#1821315",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1821315"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-11113",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-11113"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11113",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11113"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-databind/issues/2670",
          "url": "https://github.com/FasterXML/jackson-databind/issues/2670"
        }
      ],
      "release_date": "2020-03-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime"
    },
    {
      "cve": "CVE-2020-11619",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-04-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1826805"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in org.springframework:spring-aop",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-11619"
        },
        {
          "category": "external",
          "summary": "RHBZ#1826805",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826805"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-11619",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-11619"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11619",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11619"
        }
      ],
      "release_date": "2020-04-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in org.springframework:spring-aop"
    },
    {
      "cve": "CVE-2020-11620",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2020-04-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1826798"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind 2.x. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Serialization gadgets in commons-jelly:commons-jelly",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-11620"
        },
        {
          "category": "external",
          "summary": "RHBZ#1826798",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826798"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-11620",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-11620"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11620",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11620"
        }
      ],
      "release_date": "2020-04-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-05-18T10:24:57+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:2067"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: Serialization gadgets in commons-jelly:commons-jelly"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat JBoss Core Services Pack Apache Server 2.4.37 zip release\nfor RHEL 6, RHEL 7 and Microsoft Windows is available.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.\n\nThis release adds the new Apache HTTP Server 2.4.37 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.29 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys (CVE-2018-0737) * openssl: timing side channel attack in the DSA signature algorithm (CVE-2018-0734) * mod_auth_digest: access control bypass due to race condition (CVE-2019-0217) * openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407) * mod_session_cookie does not respect expiry time (CVE-2018-17199) * mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189) * mod_http2: possible crash on late upgrade (CVE-2019-0197) * mod_http2: read-after-free on a string compare (CVE-2019-0196) * nghttp2: HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511) * nghttp2: HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513) * mod_http2: HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516) * mod_http2: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:3935",
        "url": "https://access.redhat.com/errata/RHSA-2019:3935"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1568253",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253"
      },
      {
        "category": "external",
        "summary": "1644364",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364"
      },
      {
        "category": "external",
        "summary": "1645695",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695"
      },
      {
        "category": "external",
        "summary": "1668493",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668493"
      },
      {
        "category": "external",
        "summary": "1668497",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668497"
      },
      {
        "category": "external",
        "summary": "1695020",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695020"
      },
      {
        "category": "external",
        "summary": "1695030",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
      },
      {
        "category": "external",
        "summary": "1695042",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "external",
        "summary": "JBCS-798",
        "url": "https://issues.redhat.com/browse/JBCS-798"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3935.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release",
    "tracking": {
      "current_release_date": "2024-11-05T21:37:29+00:00",
      "generator": {
        "date": "2024-11-05T21:37:29+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:3935",
      "initial_release_date": "2019-11-20T16:08:18+00:00",
      "revision_history": [
        {
          "date": "2019-11-20T16:08:18+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-01-06T13:01:52+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:37:29+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services 1",
                "product": {
                  "name": "Red Hat JBoss Core Services 1",
                  "product_id": "Red Hat JBoss Core Services 1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Core Services"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-0734",
      "cwe": {
        "id": "CWE-385",
        "name": "Covert Timing Channel"
      },
      "discovery_date": "2018-10-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1644364"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: timing side channel attack in the DSA signature algorithm",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-0734"
        },
        {
          "category": "external",
          "summary": "RHBZ#1644364",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-0734",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-0734"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-0734",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0734"
        }
      ],
      "release_date": "2018-10-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl: timing side channel attack in the DSA signature algorithm"
    },
    {
      "cve": "CVE-2018-0737",
      "cwe": {
        "id": "CWE-385",
        "name": "Covert Timing Channel"
      },
      "discovery_date": "2018-04-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1568253"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "OpenSSL RSA key generation was found to be vulnerable to cache side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover parts of the private key.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-0737"
        },
        {
          "category": "external",
          "summary": "RHBZ#1568253",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-0737",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-0737"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-0737",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0737"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2018/04/16/3",
          "url": "http://www.openwall.com/lists/oss-security/2018/04/16/3"
        },
        {
          "category": "external",
          "summary": "https://www.openssl.org/news/secadv/20180416.txt",
          "url": "https://www.openssl.org/news/secadv/20180416.txt"
        }
      ],
      "release_date": "2018-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Alejandro Cabrera Aldaya"
          ],
          "organization": "Universidad Tecnologica de la Habana CUJAE; Cuba"
        },
        {
          "names": [
            "Billy Bob Brumley",
            "Cesar Pereida Garcia",
            "Sohaib ul Hassan"
          ]
        },
        {
          "names": [
            "Nicola Tuveri"
          ],
          "organization": "Tampere University of Technology; Finland"
        }
      ],
      "cve": "CVE-2018-5407",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2018-11-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1645695"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is a timing side-channel flaw on processors which implement SMT/Hyper-Threading architectures. It can result in leakage of secret data in applications such as OpenSSL that has secret dependent control flow at any granularity level. In order to exploit this flaw, the attacker needs to run a malicious process on the same core of the processor as the victim process.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "RHBZ#1645695",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-5407",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "https://github.com/bbbrumley/portsmash",
          "url": "https://github.com/bbbrumley/portsmash"
        },
        {
          "category": "external",
          "summary": "https://www.openssl.org/news/secadv/20181112.txt",
          "url": "https://www.openssl.org/news/secadv/20181112.txt"
        }
      ],
      "release_date": "2018-10-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        },
        {
          "category": "workaround",
          "details": "At this time Red Hat Engineering is working on patches for openssl package in Red Hat Enterprise Linux 7 to address this issue.  Until fixes are available, users are advised to review the guidance supplied in the L1 Terminal Fault vulnerability article: https://access.redhat.com/security/vulnerabilities/L1TF and decide what their exposure across shared CPU threads are and act accordingly.",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)"
    },
    {
      "cve": "CVE-2018-17189",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-01-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1668497"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_http2: DoS via slow, unneeded request bodies",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-17189"
        },
        {
          "category": "external",
          "summary": "RHBZ#1668497",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668497"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-17189",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-17189"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17189",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17189"
        }
      ],
      "release_date": "2019-01-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_http2: DoS via slow, unneeded request bodies"
    },
    {
      "cve": "CVE-2018-17199",
      "cwe": {
        "id": "CWE-613",
        "name": "Insufficient Session Expiration"
      },
      "discovery_date": "2019-01-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1668493"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_session_cookie does not respect expiry time",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-17199"
        },
        {
          "category": "external",
          "summary": "RHBZ#1668493",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668493"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-17199",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-17199"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17199",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17199"
        }
      ],
      "release_date": "2019-01-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_session_cookie does not respect expiry time"
    },
    {
      "cve": "CVE-2019-0196",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2019-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1695030"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_http2: read-after-free on a string compare",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0196"
        },
        {
          "category": "external",
          "summary": "RHBZ#1695030",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0196",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0196"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196"
        },
        {
          "category": "external",
          "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
          "url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2019-04-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_http2: read-after-free on a string compare"
    },
    {
      "cve": "CVE-2019-0197",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2019-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1695042"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set \"H2Upgrade on\" are unaffected by this issue.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_http2: possible crash on late upgrade",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0197"
        },
        {
          "category": "external",
          "summary": "RHBZ#1695042",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0197",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0197"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197"
        },
        {
          "category": "external",
          "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
          "url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2019-02-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_http2: possible crash on late upgrade"
    },
    {
      "cve": "CVE-2019-0217",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2019-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1695020"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A race condition was found in mod_auth_digest when the web server was running in a threaded MPM configuration. It could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_auth_digest: access control bypass due to race condition",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Based on the the fact that digest authentication is rarely used in modern day web applications and httpd package shipped with Red Hat products do not ship threaded MPM configuration by default, this flaw has been rated as having Moderate level security impact. Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This flaw has been rated as having a security impact of Moderate, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0217"
        },
        {
          "category": "external",
          "summary": "RHBZ#1695020",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695020"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0217",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0217"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0217",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0217"
        },
        {
          "category": "external",
          "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
          "url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2019-04-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        },
        {
          "category": "workaround",
          "details": "This flaw only affects a threaded server configuration, so using the prefork MPM is an effective mitigation.  In versions of httpd package shipped with Red Hat Enterprise Linux 7, the prefork MPM is the default configuration.",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_auth_digest: access control bypass due to race condition"
    },
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for rh-nodejs10-nodejs is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nThe following packages have been upgraded to a later upstream version: rh-nodejs10-nodejs (10.16.3).\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* HTTP/2: flood using PRIORITY frames results in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)\n\n* HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\n* HTTP/2: flood using empty frames results in excessive resource consumption (CVE-2019-9518)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2939",
        "url": "https://access.redhat.com/errata/RHSA-2019:2939"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1735745",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
      },
      {
        "category": "external",
        "summary": "1735749",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2939.json"
      }
    ],
    "title": "Red Hat Security Advisory: rh-nodejs10-nodejs security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:27:01+00:00",
      "generator": {
        "date": "2024-11-05T21:27:01+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2939",
      "initial_release_date": "2019-10-01T10:03:49+00:00",
      "revision_history": [
        {
          "date": "2019-10-01T10:03:49+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-10-01T10:03:49+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:27:01+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-Alt-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                  "product_id": "7Server-RHSCL-3.3-7.5.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                  "product_id": "7Server-RHSCL-3.3-7.6.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                  "product_id": "7Server-RHSCL-3.3-7.7.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Software Collections"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
                  "product_id": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs@10.16.3-3.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
                  "product_id": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-devel@10.16.3-3.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
                  "product_id": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-npm@6.9.0-10.16.3.3.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
                  "product_id": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-debuginfo@10.16.3-3.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-0:3.2-3.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs10-0:3.2-3.el7.ppc64le",
                  "product_id": "rh-nodejs10-0:3.2-3.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10@3.2-3.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
                  "product_id": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-runtime@3.2-3.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
                  "product_id": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-scldevel@3.2-3.el7?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
                "product": {
                  "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
                  "product_id": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs@10.16.3-3.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
                "product": {
                  "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
                  "product_id": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-devel@10.16.3-3.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
                "product": {
                  "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
                  "product_id": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-npm@6.9.0-10.16.3.3.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
                "product": {
                  "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
                  "product_id": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-debuginfo@10.16.3-3.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-0:3.2-3.el7.s390x",
                "product": {
                  "name": "rh-nodejs10-0:3.2-3.el7.s390x",
                  "product_id": "rh-nodejs10-0:3.2-3.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10@3.2-3.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x",
                "product": {
                  "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x",
                  "product_id": "rh-nodejs10-runtime-0:3.2-3.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-runtime@3.2-3.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
                "product": {
                  "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
                  "product_id": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-scldevel@3.2-3.el7?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
                "product": {
                  "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
                  "product_id": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs@10.16.3-3.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
                "product": {
                  "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
                  "product_id": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-devel@10.16.3-3.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
                "product": {
                  "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
                  "product_id": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-npm@6.9.0-10.16.3.3.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
                "product": {
                  "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
                  "product_id": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-debuginfo@10.16.3-3.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-0:3.2-3.el7.aarch64",
                "product": {
                  "name": "rh-nodejs10-0:3.2-3.el7.aarch64",
                  "product_id": "rh-nodejs10-0:3.2-3.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10@3.2-3.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
                "product": {
                  "name": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
                  "product_id": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-runtime@3.2-3.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
                "product": {
                  "name": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
                  "product_id": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-scldevel@3.2-3.el7?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
                "product": {
                  "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
                  "product_id": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs@10.16.3-3.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-0:3.2-3.el7.src",
                "product": {
                  "name": "rh-nodejs10-0:3.2-3.el7.src",
                  "product_id": "rh-nodejs10-0:3.2-3.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10@3.2-3.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
                "product": {
                  "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
                  "product_id": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-docs@10.16.3-3.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
                "product": {
                  "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
                  "product_id": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs@10.16.3-3.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
                "product": {
                  "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
                  "product_id": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-devel@10.16.3-3.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
                "product": {
                  "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
                  "product_id": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-npm@6.9.0-10.16.3.3.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
                "product": {
                  "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
                  "product_id": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-debuginfo@10.16.3-3.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-0:3.2-3.el7.x86_64",
                "product": {
                  "name": "rh-nodejs10-0:3.2-3.el7.x86_64",
                  "product_id": "rh-nodejs10-0:3.2-3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10@3.2-3.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
                "product": {
                  "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
                  "product_id": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-runtime@3.2-3.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
                "product": {
                  "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
                  "product_id": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-scldevel@3.2-3.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.src",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch"
        },
        "product_reference": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch"
        },
        "product_reference": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch"
        },
        "product_reference": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch"
        },
        "product_reference": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch"
        },
        "product_reference": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.src",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch"
        },
        "product_reference": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-12121",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2018-11-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1661002"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs: Denial of Service with large HTTP headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The nodejs RPMs shipped in Red Hat OpenShift Container Platform (OCP) versions 3.6 through 3.10 are vulnerable to this flaw because they contain the affected code. Later versions of OCP used nodejs RPMs delivered from Red Hat Software Collections and Red Hat Enterprise Linux channels.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-12121"
        },
        {
          "category": "external",
          "summary": "RHBZ#1661002",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661002"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12121",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-12121"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12121",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12121"
        }
      ],
      "release_date": "2018-11-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "nodejs: Denial of Service with large HTTP headers"
    },
    {
      "cve": "CVE-2018-12122",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2018-11-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1661005"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that Node.js HTTP server was vulnerable to a Slowloris type attack. An attacker could make long lived connections by sending bytes very slowly to the server, saturating its resource and possibly resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs: Slowloris HTTP Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The nodejs RPMs shipped in Red Hat OpenShift Container Platform (OCP) versions 3.6 through 3.10 are vulnerable to this flaw because they contain the affected code. Later versions of OCP used nodejs RPMs delivered from Red Hat Software Collections and Red Hat Enterprise Linux channels.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-12122"
        },
        {
          "category": "external",
          "summary": "RHBZ#1661005",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661005"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12122",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-12122"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12122",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12122"
        }
      ],
      "release_date": "2018-11-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        },
        {
          "category": "workaround",
          "details": "The use of a Load Balancer or a Reverse Proxy will increase the difficulty of the attack.",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "nodejs: Slowloris HTTP Denial of Service"
    },
    {
      "cve": "CVE-2018-12123",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2018-11-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1661010"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in URL parser for javascript protocol: If a Node.js application is using url.parse() to determine the URL hostname, that hostname can be spoofed by using a mixed case \"javascript:\" (e.g. \"javAscript:\") protocol (other protocols are not affected). If security decisions are made about the URL based on the hostname, they may be incorrect.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs: Hostname spoofing in URL parser for javascript protocol",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The nodejs RPMs shipped in Red Hat OpenShift Container Platform (OCP) versions 3.6 through 3.10 are vulnerable to this flaw because they contain the affected code. Later versions of OCP used nodejs RPMs delivered from Red Hat Software Collections and Red Hat Enterprise Linux channels.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-12123"
        },
        {
          "category": "external",
          "summary": "RHBZ#1661010",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661010"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12123",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-12123"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12123",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12123"
        }
      ],
      "release_date": "2018-11-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "nodejs: Hostname spoofing in URL parser for javascript protocol"
    },
    {
      "cve": "CVE-2019-5737",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-03-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1690808"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that the original fix for Slowloris, CVE-2018-12122, was insufficient. It is possible to bypass the server\u0027s headersTimeout by sending two specially crafted HTTP requests in the same connection. An attacker could use this flaw to bypass Slowloris protection, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5737"
        },
        {
          "category": "external",
          "summary": "RHBZ#1690808",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1690808"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5737",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5737"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5737",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5737"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/ja/blog/vulnerability/february-2019-security-releases/",
          "url": "https://nodejs.org/ja/blog/vulnerability/february-2019-security-releases/"
        }
      ],
      "release_date": "2019-02-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        },
        {
          "category": "workaround",
          "details": "The use of a Load Balancer or a Reverse Proxy will increase the difficulty of the attack.",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass"
    },
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9515",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735745"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735745",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9518",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735749"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using frames with an empty payload, a flood could occur that results in excessive CPU usage and starvation of other clients. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using empty frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735749",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9518",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using empty frames results in excessive resource consumption"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for rh-nginx110-nginx is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2745",
        "url": "https://access.redhat.com/errata/RHSA-2019:2745"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2745.json"
      }
    ],
    "title": "Red Hat Security Advisory: rh-nginx110-nginx security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:24:11+00:00",
      "generator": {
        "date": "2024-11-05T21:24:11+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2745",
      "initial_release_date": "2019-09-13T08:40:34+00:00",
      "revision_history": [
        {
          "date": "2019-09-13T08:40:34+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-09-13T08:40:34+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:24:11+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
                  "product_id": "7Server-RHSCL-3.3-7.4.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                  "product_id": "7Server-RHSCL-3.3-7.5.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                  "product_id": "7Server-RHSCL-3.3-7.6.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                  "product_id": "7Server-RHSCL-3.3-7.7.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Software Collections"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
                  "product_id": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-http-image-filter@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-http-perl@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-http-xslt-filter@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-mail@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-stream@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
                  "product_id": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-debuginfo@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
                  "product_id": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-http-image-filter@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-http-perl@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-http-xslt-filter@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-mail@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-stream@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
                  "product_id": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-debuginfo@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
                "product": {
                  "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
                  "product_id": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx@1.10.2-9.el6.1?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
                "product": {
                  "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
                  "product_id": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx@1.10.2-9.el7.1?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-13T08:40:34+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx110-nginx service must be restarted for this update to take effect.",
          "product_ids": [
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2745"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-13T08:40:34+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx110-nginx service must be restarted for this update to take effect.",
          "product_ids": [
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2745"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-13T08:40:34+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx110-nginx service must be restarted for this update to take effect.",
          "product_ids": [
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2745"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for Red Hat JBoss Enterprise Application Platform 7.2 for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.\n\nThis release of Red Hat JBoss Enterprise Application Platform 7.2.5 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.2.4, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.2.5 Release Notes for information about the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* undertow: HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* undertow: HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* undertow: HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* undertow: HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* wildfly-core: Incorrect privileges for \u0027Monitor\u0027, \u0027Auditor\u0027 and \u0027Deployer\u0027 user by default (CVE-2019-14838)\n\n* wildfly: wildfly-security-manager: security manager authorization bypass (CVE-2019-14843)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:4018",
        "url": "https://access.redhat.com/errata/RHSA-2019:4018"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1735745",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1751227",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1751227"
      },
      {
        "category": "external",
        "summary": "1752980",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752980"
      },
      {
        "category": "external",
        "summary": "JBEAP-17075",
        "url": "https://issues.redhat.com/browse/JBEAP-17075"
      },
      {
        "category": "external",
        "summary": "JBEAP-17220",
        "url": "https://issues.redhat.com/browse/JBEAP-17220"
      },
      {
        "category": "external",
        "summary": "JBEAP-17365",
        "url": "https://issues.redhat.com/browse/JBEAP-17365"
      },
      {
        "category": "external",
        "summary": "JBEAP-17476",
        "url": "https://issues.redhat.com/browse/JBEAP-17476"
      },
      {
        "category": "external",
        "summary": "JBEAP-17478",
        "url": "https://issues.redhat.com/browse/JBEAP-17478"
      },
      {
        "category": "external",
        "summary": "JBEAP-17483",
        "url": "https://issues.redhat.com/browse/JBEAP-17483"
      },
      {
        "category": "external",
        "summary": "JBEAP-17495",
        "url": "https://issues.redhat.com/browse/JBEAP-17495"
      },
      {
        "category": "external",
        "summary": "JBEAP-17496",
        "url": "https://issues.redhat.com/browse/JBEAP-17496"
      },
      {
        "category": "external",
        "summary": "JBEAP-17513",
        "url": "https://issues.redhat.com/browse/JBEAP-17513"
      },
      {
        "category": "external",
        "summary": "JBEAP-17521",
        "url": "https://issues.redhat.com/browse/JBEAP-17521"
      },
      {
        "category": "external",
        "summary": "JBEAP-17523",
        "url": "https://issues.redhat.com/browse/JBEAP-17523"
      },
      {
        "category": "external",
        "summary": "JBEAP-17547",
        "url": "https://issues.redhat.com/browse/JBEAP-17547"
      },
      {
        "category": "external",
        "summary": "JBEAP-17548",
        "url": "https://issues.redhat.com/browse/JBEAP-17548"
      },
      {
        "category": "external",
        "summary": "JBEAP-17560",
        "url": "https://issues.redhat.com/browse/JBEAP-17560"
      },
      {
        "category": "external",
        "summary": "JBEAP-17579",
        "url": "https://issues.redhat.com/browse/JBEAP-17579"
      },
      {
        "category": "external",
        "summary": "JBEAP-17582",
        "url": "https://issues.redhat.com/browse/JBEAP-17582"
      },
      {
        "category": "external",
        "summary": "JBEAP-17603",
        "url": "https://issues.redhat.com/browse/JBEAP-17603"
      },
      {
        "category": "external",
        "summary": "JBEAP-17631",
        "url": "https://issues.redhat.com/browse/JBEAP-17631"
      },
      {
        "category": "external",
        "summary": "JBEAP-17647",
        "url": "https://issues.redhat.com/browse/JBEAP-17647"
      },
      {
        "category": "external",
        "summary": "JBEAP-17665",
        "url": "https://issues.redhat.com/browse/JBEAP-17665"
      },
      {
        "category": "external",
        "summary": "JBEAP-17722",
        "url": "https://issues.redhat.com/browse/JBEAP-17722"
      },
      {
        "category": "external",
        "summary": "JBEAP-17874",
        "url": "https://issues.redhat.com/browse/JBEAP-17874"
      },
      {
        "category": "external",
        "summary": "JBEAP-17880",
        "url": "https://issues.redhat.com/browse/JBEAP-17880"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_4018.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.5 on RHEL 6 security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:38:37+00:00",
      "generator": {
        "date": "2024-11-05T21:38:37+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:4018",
      "initial_release_date": "2019-11-26T19:57:07+00:00",
      "revision_history": [
        {
          "date": "2019-11-26T19:57:07+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-11-26T19:57:07+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:38:37+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss EAP 7.2 for RHEL 6 Server",
                "product": {
                  "name": "Red Hat JBoss EAP 7.2 for RHEL 6 Server",
                  "product_id": "6Server-JBEAP-7.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.2::el6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Enterprise Application Platform"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-undertow@2.0.26-2.SP3_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf@3.2.10-1.redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf-rt@3.2.10-1.redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf-services@3.2.10-1.redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf-tools@3.2.10-1.redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
                "product": {
                  "name": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
                  "product_id": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-glassfish-jsf@2.3.5-5.SP3_redhat_00003.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
                "product": {
                  "name": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
                  "product_id": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-byte-buddy@1.9.11-1.redhat_00002.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar@1.4.18-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-common-api@1.4.18-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-common-impl@1.4.18-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-common-spi@1.4.18-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-core-api@1.4.18-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-core-impl@1.4.18-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-deployers-common@1.4.18-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-jdbc@1.4.18-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-validator@1.4.18-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-atom-provider@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-cdi@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-client@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-client-microprofile@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-crypto@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jackson-provider@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jackson2-provider@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jaxb-provider@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jaxrs@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jettison-provider@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jose-jwt@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jsapi@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-json-binding-provider@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-json-p-provider@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-multipart-provider@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-rxjava2@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-spring@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-validator-provider-11@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-yaml-provider@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-elytron-tool@1.4.4-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-http-client-common@1.0.17-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-http-ejb-client@1.0.17-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-http-naming-client@1.0.17-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-http-transaction-client@1.0.17-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hal-console@3.0.17-2.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-elytron@1.6.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hibernate@5.3.13-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hibernate-core@5.3.13-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hibernate-entitymanager@5.3.13-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hibernate-envers@5.3.13-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hibernate-java8@5.3.13-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
                "product": {
                  "name": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
                  "product_id": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketbox@5.0.3-6.Final_redhat_00005.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
                "product": {
                  "name": "eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
                  "product_id": "eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketbox-infinispan@5.0.3-6.Final_redhat_00005.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                "product": {
                  "name": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_id": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-bindings@2.5.5-20.SP12_redhat_00009.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                "product": {
                  "name": "eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_id": "eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-wildfly8@2.5.5-20.SP12_redhat_00009.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                "product": {
                  "name": "eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_id": "eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-api@2.5.5-20.SP12_redhat_00009.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                "product": {
                  "name": "eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_id": "eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-common@2.5.5-20.SP12_redhat_00009.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                "product": {
                  "name": "eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_id": "eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-config@2.5.5-20.SP12_redhat_00009.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                "product": {
                  "name": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_id": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-federation@2.5.5-20.SP12_redhat_00009.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                "product": {
                  "name": "eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_id": "eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-idm-api@2.5.5-20.SP12_redhat_00009.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                "product": {
                  "name": "eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_id": "eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-idm-impl@2.5.5-20.SP12_redhat_00009.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                "product": {
                  "name": "eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_id": "eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-idm-simple-schema@2.5.5-20.SP12_redhat_00009.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                "product": {
                  "name": "eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_id": "eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-impl@2.5.5-20.SP12_redhat_00009.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-xnio-base@3.7.6-2.SP1_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-cli@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-core@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.0@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.0-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.1@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.1-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.2@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.0@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.0-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.1@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.1-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly11.0@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly11.0-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly12.0@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly12.0-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly13.0-server@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly14.0-server@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-openssl@1.0.8-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-openssl-java@1.0.8-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-remoting@5.0.16-2.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-yasson@1.0.5-1.redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-genericjms@2.0.2-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-msc@1.4.11-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
                  "product_id": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly@7.2.5-4.GA_redhat_00002.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
                  "product_id": "eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-javadocs@7.2.5-4.GA_redhat_00002.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
                  "product_id": "eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-modules@7.2.5-4.GA_redhat_00002.1.el6eap?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
                  "product_id": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-undertow@2.0.26-2.SP3_redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
                  "product_id": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf@3.2.10-1.redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
                "product": {
                  "name": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
                  "product_id": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-glassfish-jsf@2.3.5-5.SP3_redhat_00003.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
                "product": {
                  "name": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
                  "product_id": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-byte-buddy@1.9.11-1.redhat_00002.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
                  "product_id": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar@1.4.18-1.Final_redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
                  "product_id": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy@3.6.1-7.SP7_redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
                  "product_id": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-elytron-tool@1.4.4-1.Final_redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
                  "product_id": "eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-http-client@1.0.17-1.Final_redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
                  "product_id": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hal-console@3.0.17-2.Final_redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
                  "product_id": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-elytron@1.6.5-1.Final_redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
                  "product_id": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hibernate@5.3.13-1.Final_redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
                "product": {
                  "name": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
                  "product_id": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketbox@5.0.3-6.Final_redhat_00005.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
                "product": {
                  "name": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
                  "product_id": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-bindings@2.5.5-20.SP12_redhat_00009.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
                "product": {
                  "name": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
                  "product_id": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-federation@2.5.5-20.SP12_redhat_00009.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
                  "product_id": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-xnio-base@3.7.6-2.SP1_redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
                "product": {
                  "name": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
                  "product_id": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration@1.3.1-6.Final_redhat_00006.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
                  "product_id": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-openssl@1.0.8-1.Final_redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
                  "product_id": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-remoting@5.0.16-2.Final_redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src",
                  "product_id": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-yasson@1.0.5-1.redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
                  "product_id": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-genericjms@2.0.2-1.Final_redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
                  "product_id": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-msc@1.4.11-1.Final_redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
                "product": {
                  "name": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
                  "product_id": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly@7.2.5-4.GA_redhat_00002.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
                  "product_id": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-openssl-linux-x86_64@1.0.8-5.Final_redhat_00001.1.el6eap?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
                "product": {
                  "name": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
                  "product_id": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-openssl-linux-x86_64@1.0.8-5.Final_redhat_00001.1.el6eap?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
                "product": {
                  "name": "eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
                  "product_id": "eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-openssl-linux-x86_64-debuginfo@1.0.8-5.Final_redhat_00001.1.el6eap?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch"
        },
        "product_reference": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src"
        },
        "product_reference": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch"
        },
        "product_reference": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src"
        },
        "product_reference": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src"
        },
        "product_reference": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch"
        },
        "product_reference": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src"
        },
        "product_reference": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch"
        },
        "product_reference": "eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch"
        },
        "product_reference": "eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch"
        },
        "product_reference": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src"
        },
        "product_reference": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch"
        },
        "product_reference": "eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch"
        },
        "product_reference": "eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch"
        },
        "product_reference": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src"
        },
        "product_reference": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch"
        },
        "product_reference": "eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch"
        },
        "product_reference": "eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch"
        },
        "product_reference": "eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch"
        },
        "product_reference": "eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch"
        },
        "product_reference": "eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch"
        },
        "product_reference": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src"
        },
        "product_reference": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch"
        },
        "product_reference": "eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch"
        },
        "product_reference": "eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64 as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64"
        },
        "product_reference": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64 as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64"
        },
        "product_reference": "eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
          "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T19:57:07+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details about how to apply this update, which includes the changes described in this advisory, see:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4018"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
          "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T19:57:07+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details about how to apply this update, which includes the changes described in this advisory, see:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4018"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
          "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T19:57:07+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details about how to apply this update, which includes the changes described in this advisory, see:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4018"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9515",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735745"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
          "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735745",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T19:57:07+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details about how to apply this update, which includes the changes described in this advisory, see:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4018"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "F\u00e1bio Magalh\u00e3es de Andrade"
          ],
          "organization": "Sonda Ativas"
        },
        {
          "names": [
            "Juliano de Castro Santos",
            "Leonard Lunardi"
          ],
          "organization": "UnimedBH"
        }
      ],
      "cve": "CVE-2019-14838",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2019-08-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1751227"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that Wildfly users had default user permissions set incorrectly. A malicious user could use this flaw to access unauthorized controls for the application server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly-core: Incorrect privileges for \u0027Monitor\u0027, \u0027Auditor\u0027 and \u0027Deployer\u0027 user by default",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
          "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14838"
        },
        {
          "category": "external",
          "summary": "RHBZ#1751227",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1751227"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14838",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14838"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14838",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14838"
        },
        {
          "category": "external",
          "summary": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14838",
          "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14838"
        }
      ],
      "release_date": "2019-10-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T19:57:07+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details about how to apply this update, which includes the changes described in this advisory, see:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4018"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wildfly-core: Incorrect privileges for \u0027Monitor\u0027, \u0027Auditor\u0027 and \u0027Deployer\u0027 user by default"
    },
    {
      "cve": "CVE-2019-14843",
      "cwe": {
        "id": "CWE-592",
        "name": "CWE-592"
      },
      "discovery_date": "2019-09-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1752980"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly-security-manager: security manager authorization bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
          "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
          "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14843"
        },
        {
          "category": "external",
          "summary": "RHBZ#1752980",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752980"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14843",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14843"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14843",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14843"
        }
      ],
      "release_date": "2019-09-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T19:57:07+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details about how to apply this update, which includes the changes described in this advisory, see:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4018"
        },
        {
          "category": "workaround",
          "details": "This flaw only affects the Security Manager running under JDK 11 or 8. To mitigate exposure to this flaw, do not run under those JDK versions.",
          "product_ids": [
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el6eap.x86_64",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "wildfly-security-manager: security manager authorization bypass"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for Red Hat JBoss Enterprise Application Platform 7.2 for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.\n\nThis release of Red Hat JBoss Enterprise Application Platform 7.2.5 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.2.4, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.2.5 Release Notes for information about the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* undertow: HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* undertow: HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* undertow: HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* undertow: HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* wildfly-core: Incorrect privileges for \u0027Monitor\u0027, \u0027Auditor\u0027 and \u0027Deployer\u0027 user by default (CVE-2019-14838)\n\n* wildfly: wildfly-security-manager: security manager authorization bypass (CVE-2019-14843)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:4019",
        "url": "https://access.redhat.com/errata/RHSA-2019:4019"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1735745",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1751227",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1751227"
      },
      {
        "category": "external",
        "summary": "1752980",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752980"
      },
      {
        "category": "external",
        "summary": "JBEAP-17075",
        "url": "https://issues.redhat.com/browse/JBEAP-17075"
      },
      {
        "category": "external",
        "summary": "JBEAP-17220",
        "url": "https://issues.redhat.com/browse/JBEAP-17220"
      },
      {
        "category": "external",
        "summary": "JBEAP-17365",
        "url": "https://issues.redhat.com/browse/JBEAP-17365"
      },
      {
        "category": "external",
        "summary": "JBEAP-17476",
        "url": "https://issues.redhat.com/browse/JBEAP-17476"
      },
      {
        "category": "external",
        "summary": "JBEAP-17478",
        "url": "https://issues.redhat.com/browse/JBEAP-17478"
      },
      {
        "category": "external",
        "summary": "JBEAP-17483",
        "url": "https://issues.redhat.com/browse/JBEAP-17483"
      },
      {
        "category": "external",
        "summary": "JBEAP-17495",
        "url": "https://issues.redhat.com/browse/JBEAP-17495"
      },
      {
        "category": "external",
        "summary": "JBEAP-17496",
        "url": "https://issues.redhat.com/browse/JBEAP-17496"
      },
      {
        "category": "external",
        "summary": "JBEAP-17513",
        "url": "https://issues.redhat.com/browse/JBEAP-17513"
      },
      {
        "category": "external",
        "summary": "JBEAP-17521",
        "url": "https://issues.redhat.com/browse/JBEAP-17521"
      },
      {
        "category": "external",
        "summary": "JBEAP-17523",
        "url": "https://issues.redhat.com/browse/JBEAP-17523"
      },
      {
        "category": "external",
        "summary": "JBEAP-17547",
        "url": "https://issues.redhat.com/browse/JBEAP-17547"
      },
      {
        "category": "external",
        "summary": "JBEAP-17548",
        "url": "https://issues.redhat.com/browse/JBEAP-17548"
      },
      {
        "category": "external",
        "summary": "JBEAP-17560",
        "url": "https://issues.redhat.com/browse/JBEAP-17560"
      },
      {
        "category": "external",
        "summary": "JBEAP-17579",
        "url": "https://issues.redhat.com/browse/JBEAP-17579"
      },
      {
        "category": "external",
        "summary": "JBEAP-17582",
        "url": "https://issues.redhat.com/browse/JBEAP-17582"
      },
      {
        "category": "external",
        "summary": "JBEAP-17604",
        "url": "https://issues.redhat.com/browse/JBEAP-17604"
      },
      {
        "category": "external",
        "summary": "JBEAP-17631",
        "url": "https://issues.redhat.com/browse/JBEAP-17631"
      },
      {
        "category": "external",
        "summary": "JBEAP-17647",
        "url": "https://issues.redhat.com/browse/JBEAP-17647"
      },
      {
        "category": "external",
        "summary": "JBEAP-17665",
        "url": "https://issues.redhat.com/browse/JBEAP-17665"
      },
      {
        "category": "external",
        "summary": "JBEAP-17722",
        "url": "https://issues.redhat.com/browse/JBEAP-17722"
      },
      {
        "category": "external",
        "summary": "JBEAP-17874",
        "url": "https://issues.redhat.com/browse/JBEAP-17874"
      },
      {
        "category": "external",
        "summary": "JBEAP-17880",
        "url": "https://issues.redhat.com/browse/JBEAP-17880"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_4019.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.5 on RHEL 7 security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:38:43+00:00",
      "generator": {
        "date": "2024-11-05T21:38:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:4019",
      "initial_release_date": "2019-11-26T20:01:24+00:00",
      "revision_history": [
        {
          "date": "2019-11-26T20:01:24+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-11-26T20:01:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:38:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss EAP 7.2 for RHEL 7 Server",
                "product": {
                  "name": "Red Hat JBoss EAP 7.2 for RHEL 7 Server",
                  "product_id": "7Server-JBEAP-7.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.2::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Enterprise Application Platform"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
                "product": {
                  "name": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
                  "product_id": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketbox@5.0.3-6.Final_redhat_00005.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
                "product": {
                  "name": "eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
                  "product_id": "eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketbox-infinispan@5.0.3-6.Final_redhat_00005.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-undertow@2.0.26-2.SP3_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf@3.2.10-1.redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf-rt@3.2.10-1.redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf-services@3.2.10-1.redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf-tools@3.2.10-1.redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
                "product": {
                  "name": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
                  "product_id": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-glassfish-jsf@2.3.5-5.SP3_redhat_00003.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
                "product": {
                  "name": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
                  "product_id": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-byte-buddy@1.9.11-1.redhat_00002.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar@1.4.18-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-common-api@1.4.18-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-common-impl@1.4.18-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-common-spi@1.4.18-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-core-api@1.4.18-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-core-impl@1.4.18-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-deployers-common@1.4.18-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-jdbc@1.4.18-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-validator@1.4.18-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-atom-provider@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-cdi@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-client@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-client-microprofile@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-crypto@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jackson-provider@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jackson2-provider@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jaxb-provider@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jaxrs@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jettison-provider@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jose-jwt@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jsapi@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-json-binding-provider@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-json-p-provider@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-multipart-provider@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-rxjava2@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-spring@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-validator-provider-11@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-yaml-provider@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-elytron-tool@1.4.4-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-http-client-common@1.0.17-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-http-ejb-client@1.0.17-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-http-naming-client@1.0.17-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-http-transaction-client@1.0.17-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hal-console@3.0.17-2.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-elytron@1.6.5-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hibernate@5.3.13-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hibernate-core@5.3.13-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hibernate-entitymanager@5.3.13-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hibernate-envers@5.3.13-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hibernate-java8@5.3.13-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                "product": {
                  "name": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_id": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-bindings@2.5.5-20.SP12_redhat_00009.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                "product": {
                  "name": "eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_id": "eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-wildfly8@2.5.5-20.SP12_redhat_00009.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                "product": {
                  "name": "eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_id": "eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-api@2.5.5-20.SP12_redhat_00009.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                "product": {
                  "name": "eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_id": "eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-common@2.5.5-20.SP12_redhat_00009.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                "product": {
                  "name": "eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_id": "eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-config@2.5.5-20.SP12_redhat_00009.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                "product": {
                  "name": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_id": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-federation@2.5.5-20.SP12_redhat_00009.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                "product": {
                  "name": "eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_id": "eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-idm-api@2.5.5-20.SP12_redhat_00009.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                "product": {
                  "name": "eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_id": "eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-idm-impl@2.5.5-20.SP12_redhat_00009.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                "product": {
                  "name": "eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_id": "eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-idm-simple-schema@2.5.5-20.SP12_redhat_00009.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                "product": {
                  "name": "eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_id": "eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-impl@2.5.5-20.SP12_redhat_00009.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-xnio-base@3.7.6-2.SP1_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-cli@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-core@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.0@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.0-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.1@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.1-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.2@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.0@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.0-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.1@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.1-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly11.0@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly11.0-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly12.0@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly12.0-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly13.0-server@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly14.0-server@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-openssl@1.0.8-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-openssl-java@1.0.8-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-remoting@5.0.16-2.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-yasson@1.0.5-1.redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-genericjms@2.0.2-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
                "product": {
                  "name": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_id": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-msc@1.4.11-1.Final_redhat_00001.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
                "product": {
                  "name": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
                  "product_id": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly@7.2.5-4.GA_redhat_00002.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
                "product": {
                  "name": "eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
                  "product_id": "eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-java-jdk11@7.2.5-4.GA_redhat_00002.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
                "product": {
                  "name": "eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
                  "product_id": "eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-java-jdk8@7.2.5-4.GA_redhat_00002.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
                "product": {
                  "name": "eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
                  "product_id": "eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-javadocs@7.2.5-4.GA_redhat_00002.1.el7eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
                "product": {
                  "name": "eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
                  "product_id": "eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-modules@7.2.5-4.GA_redhat_00002.1.el7eap?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
                "product": {
                  "name": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
                  "product_id": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketbox@5.0.3-6.Final_redhat_00005.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
                "product": {
                  "name": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
                  "product_id": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-undertow@2.0.26-2.SP3_redhat_00001.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
                "product": {
                  "name": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
                  "product_id": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf@3.2.10-1.redhat_00001.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
                "product": {
                  "name": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
                  "product_id": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-glassfish-jsf@2.3.5-5.SP3_redhat_00003.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
                "product": {
                  "name": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
                  "product_id": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-byte-buddy@1.9.11-1.redhat_00002.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
                "product": {
                  "name": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
                  "product_id": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar@1.4.18-1.Final_redhat_00001.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
                "product": {
                  "name": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
                  "product_id": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy@3.6.1-7.SP7_redhat_00001.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
                "product": {
                  "name": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
                  "product_id": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-elytron-tool@1.4.4-1.Final_redhat_00001.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
                "product": {
                  "name": "eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
                  "product_id": "eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-http-client@1.0.17-1.Final_redhat_00001.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
                "product": {
                  "name": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
                  "product_id": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hal-console@3.0.17-2.Final_redhat_00001.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
                "product": {
                  "name": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
                  "product_id": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-elytron@1.6.5-1.Final_redhat_00001.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
                "product": {
                  "name": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
                  "product_id": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hibernate@5.3.13-1.Final_redhat_00001.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
                "product": {
                  "name": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
                  "product_id": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-bindings@2.5.5-20.SP12_redhat_00009.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
                "product": {
                  "name": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
                  "product_id": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-federation@2.5.5-20.SP12_redhat_00009.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
                "product": {
                  "name": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
                  "product_id": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-xnio-base@3.7.6-2.SP1_redhat_00001.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
                "product": {
                  "name": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
                  "product_id": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration@1.3.1-6.Final_redhat_00006.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
                "product": {
                  "name": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
                  "product_id": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-openssl@1.0.8-1.Final_redhat_00001.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
                "product": {
                  "name": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
                  "product_id": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-remoting@5.0.16-2.Final_redhat_00001.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src",
                "product": {
                  "name": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src",
                  "product_id": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-yasson@1.0.5-1.redhat_00001.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
                "product": {
                  "name": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
                  "product_id": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-genericjms@2.0.2-1.Final_redhat_00001.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
                "product": {
                  "name": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
                  "product_id": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-msc@1.4.11-1.Final_redhat_00001.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
                "product": {
                  "name": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
                  "product_id": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly@7.2.5-4.GA_redhat_00002.1.el7eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
                "product": {
                  "name": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
                  "product_id": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-openssl-linux-x86_64@1.0.8-5.Final_redhat_00001.1.el7eap?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
                "product": {
                  "name": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
                  "product_id": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-openssl-linux-x86_64@1.0.8-5.Final_redhat_00001.1.el7eap?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
                "product": {
                  "name": "eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
                  "product_id": "eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-openssl-linux-x86_64-debuginfo@1.0.8-5.Final_redhat_00001.1.el7eap?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src"
        },
        "product_reference": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch"
        },
        "product_reference": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src"
        },
        "product_reference": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch"
        },
        "product_reference": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src"
        },
        "product_reference": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src"
        },
        "product_reference": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src"
        },
        "product_reference": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src"
        },
        "product_reference": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src"
        },
        "product_reference": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src"
        },
        "product_reference": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src"
        },
        "product_reference": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src"
        },
        "product_reference": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src"
        },
        "product_reference": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch"
        },
        "product_reference": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src"
        },
        "product_reference": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch"
        },
        "product_reference": "eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch"
        },
        "product_reference": "eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch"
        },
        "product_reference": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src"
        },
        "product_reference": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch"
        },
        "product_reference": "eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch"
        },
        "product_reference": "eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch"
        },
        "product_reference": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src"
        },
        "product_reference": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch"
        },
        "product_reference": "eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch"
        },
        "product_reference": "eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch"
        },
        "product_reference": "eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch"
        },
        "product_reference": "eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch"
        },
        "product_reference": "eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src"
        },
        "product_reference": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src"
        },
        "product_reference": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch"
        },
        "product_reference": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src"
        },
        "product_reference": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src"
        },
        "product_reference": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src"
        },
        "product_reference": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src"
        },
        "product_reference": "eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch"
        },
        "product_reference": "eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch"
        },
        "product_reference": "eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch"
        },
        "product_reference": "eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch"
        },
        "product_reference": "eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src"
        },
        "product_reference": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src"
        },
        "product_reference": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64 as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64"
        },
        "product_reference": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64 as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64"
        },
        "product_reference": "eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch"
        },
        "product_reference": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server",
          "product_id": "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
        },
        "product_reference": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src",
        "relates_to_product_reference": "7Server-JBEAP-7.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
          "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T20:01:24+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4019"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
          "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T20:01:24+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4019"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
          "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T20:01:24+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4019"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9515",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735745"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
          "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735745",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T20:01:24+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4019"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "F\u00e1bio Magalh\u00e3es de Andrade"
          ],
          "organization": "Sonda Ativas"
        },
        {
          "names": [
            "Juliano de Castro Santos",
            "Leonard Lunardi"
          ],
          "organization": "UnimedBH"
        }
      ],
      "cve": "CVE-2019-14838",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2019-08-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1751227"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that Wildfly users had default user permissions set incorrectly. A malicious user could use this flaw to access unauthorized controls for the application server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly-core: Incorrect privileges for \u0027Monitor\u0027, \u0027Auditor\u0027 and \u0027Deployer\u0027 user by default",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
          "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14838"
        },
        {
          "category": "external",
          "summary": "RHBZ#1751227",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1751227"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14838",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14838"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14838",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14838"
        },
        {
          "category": "external",
          "summary": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14838",
          "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14838"
        }
      ],
      "release_date": "2019-10-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T20:01:24+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4019"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wildfly-core: Incorrect privileges for \u0027Monitor\u0027, \u0027Auditor\u0027 and \u0027Deployer\u0027 user by default"
    },
    {
      "cve": "CVE-2019-14843",
      "cwe": {
        "id": "CWE-592",
        "name": "CWE-592"
      },
      "discovery_date": "2019-09-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1752980"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly-security-manager: security manager authorization bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
          "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
          "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
          "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14843"
        },
        {
          "category": "external",
          "summary": "RHBZ#1752980",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752980"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14843",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14843"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14843",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14843"
        }
      ],
      "release_date": "2019-09-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T20:01:24+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4019"
        },
        {
          "category": "workaround",
          "details": "This flaw only affects the Security Manager running under JDK 11 or 8. To mitigate exposure to this flaw, do not run under those JDK versions.",
          "product_ids": [
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk11-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-java-jdk8-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.src",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el7eap.x86_64",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.noarch",
            "7Server-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "wildfly-security-manager: security manager authorization bypass"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for the nginx:1.14 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 (Post Office Protocol 3) and IMAP protocols, with a focus on high concurrency, performance and low memory usage. \n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2799",
        "url": "https://access.redhat.com/errata/RHSA-2019:2799"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2799.json"
      }
    ],
    "title": "Red Hat Security Advisory: nginx:1.14 security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:25:01+00:00",
      "generator": {
        "date": "2024-11-05T21:25:01+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2799",
      "initial_release_date": "2019-09-19T07:37:12+00:00",
      "revision_history": [
        {
          "date": "2019-09-19T07:37:12+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-09-19T07:37:12+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:25:01+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.0.0.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nginx:1.14:8000020190830002848:f8e95b4e",
                "product": {
                  "name": "nginx:1.14:8000020190830002848:f8e95b4e",
                  "product_id": "nginx:1.14:8000020190830002848:f8e95b4e",
                  "product_identification_helper": {
                    "purl": "pkg:rpmmod/redhat/nginx@1.14:8000020190830002848:f8e95b4e"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
                "product": {
                  "name": "nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
                  "product_id": "nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-all-modules@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
                "product": {
                  "name": "nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
                  "product_id": "nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-filesystem@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
                "product": {
                  "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
                  "product_id": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-debugsource@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-mail@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-stream@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-debugsource@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-mail@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-stream@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-debugsource@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-mail@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-stream@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-debugsource@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-mail@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-stream@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
        },
        "product_reference": "nginx:1.14:8000020190830002848:f8e95b4e",
        "relates_to_product_reference": "AppStream-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src"
        },
        "product_reference": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch"
        },
        "product_reference": "nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch"
        },
        "product_reference": "nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-19T07:37:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2799"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-19T07:37:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2799"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-19T07:37:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2799"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Service Mesh 1.0.1.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Service Mesh is Red Hat\u0027s distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation.\n\nThis advisory covers the RPM packages for the OpenShift Service Mesh 1.0.1 release.\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames results in excessive resource consumption (CVE-2019-9513)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:3041",
        "url": "https://access.redhat.com/errata/RHSA-2019:3041"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "MAISTRA-977",
        "url": "https://issues.redhat.com/browse/MAISTRA-977"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3041.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.1 RPMs",
    "tracking": {
      "current_release_date": "2024-11-05T21:27:55+00:00",
      "generator": {
        "date": "2024-11-05T21:27:55+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:3041",
      "initial_release_date": "2019-10-14T16:55:21+00:00",
      "revision_history": [
        {
          "date": "2019-10-14T16:55:21+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-10-14T16:55:21+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:27:55+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "OpenShift Service Mesh 1.0",
                "product": {
                  "name": "OpenShift Service Mesh 1.0",
                  "product_id": "8Base-OSSM-1.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:service_mesh:1.0::el8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Service Mesh 1.0",
                "product": {
                  "name": "Red Hat OpenShift Service Mesh 1.0",
                  "product_id": "7Server-RH7-RHOSSM-1.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:service_mesh:1.0::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Service Mesh"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "servicemesh-cni-0:1.0.1-8.el8.x86_64",
                "product": {
                  "name": "servicemesh-cni-0:1.0.1-8.el8.x86_64",
                  "product_id": "servicemesh-cni-0:1.0.1-8.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh-cni@1.0.1-8.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "servicemesh-operator-0:1.0.1-8.el8.x86_64",
                "product": {
                  "name": "servicemesh-operator-0:1.0.1-8.el8.x86_64",
                  "product_id": "servicemesh-operator-0:1.0.1-8.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh-operator@1.0.1-8.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "servicemesh-prometheus-0:2.7.2-22.el8.x86_64",
                "product": {
                  "name": "servicemesh-prometheus-0:2.7.2-22.el8.x86_64",
                  "product_id": "servicemesh-prometheus-0:2.7.2-22.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh-prometheus@2.7.2-22.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "servicemesh-0:1.0.1-8.el8.x86_64",
                "product": {
                  "name": "servicemesh-0:1.0.1-8.el8.x86_64",
                  "product_id": "servicemesh-0:1.0.1-8.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh@1.0.1-8.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "servicemesh-citadel-0:1.0.1-8.el8.x86_64",
                "product": {
                  "name": "servicemesh-citadel-0:1.0.1-8.el8.x86_64",
                  "product_id": "servicemesh-citadel-0:1.0.1-8.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh-citadel@1.0.1-8.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "servicemesh-galley-0:1.0.1-8.el8.x86_64",
                "product": {
                  "name": "servicemesh-galley-0:1.0.1-8.el8.x86_64",
                  "product_id": "servicemesh-galley-0:1.0.1-8.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh-galley@1.0.1-8.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "servicemesh-istioctl-0:1.0.1-8.el8.x86_64",
                "product": {
                  "name": "servicemesh-istioctl-0:1.0.1-8.el8.x86_64",
                  "product_id": "servicemesh-istioctl-0:1.0.1-8.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh-istioctl@1.0.1-8.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "servicemesh-mixc-0:1.0.1-8.el8.x86_64",
                "product": {
                  "name": "servicemesh-mixc-0:1.0.1-8.el8.x86_64",
                  "product_id": "servicemesh-mixc-0:1.0.1-8.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh-mixc@1.0.1-8.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "servicemesh-mixs-0:1.0.1-8.el8.x86_64",
                "product": {
                  "name": "servicemesh-mixs-0:1.0.1-8.el8.x86_64",
                  "product_id": "servicemesh-mixs-0:1.0.1-8.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh-mixs@1.0.1-8.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64",
                "product": {
                  "name": "servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64",
                  "product_id": "servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh-pilot-agent@1.0.1-8.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64",
                "product": {
                  "name": "servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64",
                  "product_id": "servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh-pilot-discovery@1.0.1-8.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64",
                "product": {
                  "name": "servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64",
                  "product_id": "servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh-sidecar-injector@1.0.1-8.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "servicemesh-grafana-0:6.2.2-21.el8.x86_64",
                "product": {
                  "name": "servicemesh-grafana-0:6.2.2-21.el8.x86_64",
                  "product_id": "servicemesh-grafana-0:6.2.2-21.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh-grafana@6.2.2-21.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64",
                "product": {
                  "name": "servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64",
                  "product_id": "servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh-grafana-prometheus@6.2.2-21.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "servicemesh-proxy-0:1.0.1-7.el8.x86_64",
                "product": {
                  "name": "servicemesh-proxy-0:1.0.1-7.el8.x86_64",
                  "product_id": "servicemesh-proxy-0:1.0.1-7.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh-proxy@1.0.1-7.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kiali-0:v1.0.6.redhat1-1.el7.x86_64",
                "product": {
                  "name": "kiali-0:v1.0.6.redhat1-1.el7.x86_64",
                  "product_id": "kiali-0:v1.0.6.redhat1-1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kiali@v1.0.6.redhat1-1.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "servicemesh-cni-0:1.0.1-8.el8.src",
                "product": {
                  "name": "servicemesh-cni-0:1.0.1-8.el8.src",
                  "product_id": "servicemesh-cni-0:1.0.1-8.el8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh-cni@1.0.1-8.el8?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "servicemesh-operator-0:1.0.1-8.el8.src",
                "product": {
                  "name": "servicemesh-operator-0:1.0.1-8.el8.src",
                  "product_id": "servicemesh-operator-0:1.0.1-8.el8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh-operator@1.0.1-8.el8?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "servicemesh-prometheus-0:2.7.2-22.el8.src",
                "product": {
                  "name": "servicemesh-prometheus-0:2.7.2-22.el8.src",
                  "product_id": "servicemesh-prometheus-0:2.7.2-22.el8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh-prometheus@2.7.2-22.el8?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "servicemesh-0:1.0.1-8.el8.src",
                "product": {
                  "name": "servicemesh-0:1.0.1-8.el8.src",
                  "product_id": "servicemesh-0:1.0.1-8.el8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh@1.0.1-8.el8?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "servicemesh-grafana-0:6.2.2-21.el8.src",
                "product": {
                  "name": "servicemesh-grafana-0:6.2.2-21.el8.src",
                  "product_id": "servicemesh-grafana-0:6.2.2-21.el8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh-grafana@6.2.2-21.el8?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "servicemesh-proxy-0:1.0.1-7.el8.src",
                "product": {
                  "name": "servicemesh-proxy-0:1.0.1-7.el8.src",
                  "product_id": "servicemesh-proxy-0:1.0.1-7.el8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/servicemesh-proxy@1.0.1-7.el8?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kiali-0:v1.0.6.redhat1-1.el7.src",
                "product": {
                  "name": "kiali-0:v1.0.6.redhat1-1.el7.src",
                  "product_id": "kiali-0:v1.0.6.redhat1-1.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kiali@v1.0.6.redhat1-1.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kiali-0:v1.0.6.redhat1-1.el7.src as a component of Red Hat OpenShift Service Mesh 1.0",
          "product_id": "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.src"
        },
        "product_reference": "kiali-0:v1.0.6.redhat1-1.el7.src",
        "relates_to_product_reference": "7Server-RH7-RHOSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kiali-0:v1.0.6.redhat1-1.el7.x86_64 as a component of Red Hat OpenShift Service Mesh 1.0",
          "product_id": "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.x86_64"
        },
        "product_reference": "kiali-0:v1.0.6.redhat1-1.el7.x86_64",
        "relates_to_product_reference": "7Server-RH7-RHOSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-0:1.0.1-8.el8.src as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.src"
        },
        "product_reference": "servicemesh-0:1.0.1-8.el8.src",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.x86_64"
        },
        "product_reference": "servicemesh-0:1.0.1-8.el8.x86_64",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-citadel-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-citadel-0:1.0.1-8.el8.x86_64"
        },
        "product_reference": "servicemesh-citadel-0:1.0.1-8.el8.x86_64",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-cni-0:1.0.1-8.el8.src as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.src"
        },
        "product_reference": "servicemesh-cni-0:1.0.1-8.el8.src",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-cni-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.x86_64"
        },
        "product_reference": "servicemesh-cni-0:1.0.1-8.el8.x86_64",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-galley-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-galley-0:1.0.1-8.el8.x86_64"
        },
        "product_reference": "servicemesh-galley-0:1.0.1-8.el8.x86_64",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-grafana-0:6.2.2-21.el8.src as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.src"
        },
        "product_reference": "servicemesh-grafana-0:6.2.2-21.el8.src",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-grafana-0:6.2.2-21.el8.x86_64 as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.x86_64"
        },
        "product_reference": "servicemesh-grafana-0:6.2.2-21.el8.x86_64",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64 as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64"
        },
        "product_reference": "servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-istioctl-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-istioctl-0:1.0.1-8.el8.x86_64"
        },
        "product_reference": "servicemesh-istioctl-0:1.0.1-8.el8.x86_64",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-mixc-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-mixc-0:1.0.1-8.el8.x86_64"
        },
        "product_reference": "servicemesh-mixc-0:1.0.1-8.el8.x86_64",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-mixs-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-mixs-0:1.0.1-8.el8.x86_64"
        },
        "product_reference": "servicemesh-mixs-0:1.0.1-8.el8.x86_64",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-operator-0:1.0.1-8.el8.src as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.src"
        },
        "product_reference": "servicemesh-operator-0:1.0.1-8.el8.src",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-operator-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.x86_64"
        },
        "product_reference": "servicemesh-operator-0:1.0.1-8.el8.x86_64",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64"
        },
        "product_reference": "servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64"
        },
        "product_reference": "servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-prometheus-0:2.7.2-22.el8.src as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.src"
        },
        "product_reference": "servicemesh-prometheus-0:2.7.2-22.el8.src",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-prometheus-0:2.7.2-22.el8.x86_64 as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.x86_64"
        },
        "product_reference": "servicemesh-prometheus-0:2.7.2-22.el8.x86_64",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-proxy-0:1.0.1-7.el8.src as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.src"
        },
        "product_reference": "servicemesh-proxy-0:1.0.1-7.el8.src",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-proxy-0:1.0.1-7.el8.x86_64 as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.x86_64"
        },
        "product_reference": "servicemesh-proxy-0:1.0.1-7.el8.x86_64",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0",
          "product_id": "8Base-OSSM-1.0:servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64"
        },
        "product_reference": "servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64",
        "relates_to_product_reference": "8Base-OSSM-1.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.src",
          "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.x86_64",
          "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.src",
          "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-citadel-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.src",
          "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-galley-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.src",
          "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-istioctl-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-mixc-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-mixs-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.src",
          "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.src",
          "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.src",
          "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-14T16:55:21+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe OpenShift Service Mesh release notes provide information on the features and known issues:\n\nhttps://docs.openshift.com/container-platform/4.1/service_mesh/servicemesh-release-notes.html",
          "product_ids": [
            "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.src",
            "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.x86_64",
            "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.src",
            "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-citadel-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.src",
            "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-galley-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.src",
            "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-istioctl-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-mixc-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-mixs-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.src",
            "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.src",
            "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.src",
            "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3041"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.src",
            "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.x86_64",
            "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.src",
            "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-citadel-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.src",
            "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-galley-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.src",
            "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-istioctl-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-mixc-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-mixs-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.src",
            "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.src",
            "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.src",
            "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.src",
            "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.x86_64",
            "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.src",
            "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-citadel-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.src",
            "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-galley-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.src",
            "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-istioctl-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-mixc-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-mixs-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.src",
            "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.src",
            "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.src",
            "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.src",
          "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.x86_64",
          "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.src",
          "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-citadel-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.src",
          "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-galley-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.src",
          "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-istioctl-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-mixc-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-mixs-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.src",
          "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.src",
          "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.src",
          "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.x86_64",
          "8Base-OSSM-1.0:servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-14T16:55:21+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe OpenShift Service Mesh release notes provide information on the features and known issues:\n\nhttps://docs.openshift.com/container-platform/4.1/service_mesh/servicemesh-release-notes.html",
          "product_ids": [
            "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.src",
            "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.x86_64",
            "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.src",
            "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-citadel-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.src",
            "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-galley-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.src",
            "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-istioctl-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-mixc-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-mixs-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.src",
            "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.src",
            "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.src",
            "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3041"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.src",
            "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.x86_64",
            "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.src",
            "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-citadel-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.src",
            "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-galley-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.src",
            "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-istioctl-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-mixc-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-mixs-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.src",
            "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.src",
            "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.src",
            "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.src",
            "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.x86_64",
            "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.src",
            "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-citadel-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.src",
            "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-galley-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.src",
            "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-istioctl-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-mixc-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-mixs-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.src",
            "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.src",
            "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.src",
            "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.x86_64",
            "8Base-OSSM-1.0:servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for JBoss Core Services on RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release adds the new Apache HTTP Server 2.4.37 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.29 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys (CVE-2018-0737)\n* openssl: timing side channel attack in the DSA signature algorithm (CVE-2018-0734)\n* mod_auth_digest: access control bypass due to race condition (CVE-2019-0217)\n* openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407)\n* mod_session_cookie does not respect expiry time (CVE-2018-17199)\n* mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189)\n* mod_http2: possible crash on late upgrade (CVE-2019-0197)\n* mod_http2: read-after-free on a string compare (CVE-2019-0196)\n* nghttp2: HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)\n* nghttp2: HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n* mod_http2: HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n* mod_http2: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:3933",
        "url": "https://access.redhat.com/errata/RHSA-2019:3933"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1568253",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253"
      },
      {
        "category": "external",
        "summary": "1644364",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364"
      },
      {
        "category": "external",
        "summary": "1645695",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695"
      },
      {
        "category": "external",
        "summary": "1668493",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668493"
      },
      {
        "category": "external",
        "summary": "1668497",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668497"
      },
      {
        "category": "external",
        "summary": "1695020",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695020"
      },
      {
        "category": "external",
        "summary": "1695030",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
      },
      {
        "category": "external",
        "summary": "1695042",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "external",
        "summary": "JBCS-798",
        "url": "https://issues.redhat.com/browse/JBCS-798"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3933.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release on RHEL 7",
    "tracking": {
      "current_release_date": "2024-11-05T21:36:45+00:00",
      "generator": {
        "date": "2024-11-05T21:36:45+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:3933",
      "initial_release_date": "2019-11-20T16:14:21+00:00",
      "revision_history": [
        {
          "date": "2019-11-20T16:14:21+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-01-06T13:04:40+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:36:45+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services on RHEL 7 Server",
                "product": {
                  "name": "Red Hat JBoss Core Services on RHEL 7 Server",
                  "product_id": "7Server-JBCS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Core Services"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-20.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-devel@2.11-20.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-debuginfo@2.11-20.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-63.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-devel@1.6.3-63.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-debuginfo@1.6.3-63.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1-25.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.1.1-25.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.1.1-25.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.1.1-25.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.1.1-25.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.1.1-25.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-devel@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-debuginfo@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-7.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-devel@1.0.6-7.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-debuginfo@1.0.6-7.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-4.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-4.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-4.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-14.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.64.1-14.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.64.1-14.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.64.1-14.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-33.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-33.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-33.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-33.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-33.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.37-33.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-33.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-33.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-33.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-33.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.46-22.redhat_1.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.46-22.redhat_1.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.46-22.redhat_1.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.12-9.Final_redhat_2.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.12-9.Final_redhat_2.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-16.GA.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-16.GA.jbcs.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-20.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-63.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1-25.jbcs.el7?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-48.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-7.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-4.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-14.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-33.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.46-22.redhat_1.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.12-9.Final_redhat_2.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-16.GA.jbcs.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
                "product": {
                  "name": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
                  "product_id": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.37-33.jbcs.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch"
        },
        "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-0734",
      "cwe": {
        "id": "CWE-385",
        "name": "Covert Timing Channel"
      },
      "discovery_date": "2018-10-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1644364"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: timing side channel attack in the DSA signature algorithm",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-0734"
        },
        {
          "category": "external",
          "summary": "RHBZ#1644364",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-0734",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-0734"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-0734",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0734"
        }
      ],
      "release_date": "2018-10-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl: timing side channel attack in the DSA signature algorithm"
    },
    {
      "cve": "CVE-2018-0737",
      "cwe": {
        "id": "CWE-385",
        "name": "Covert Timing Channel"
      },
      "discovery_date": "2018-04-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1568253"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "OpenSSL RSA key generation was found to be vulnerable to cache side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover parts of the private key.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-0737"
        },
        {
          "category": "external",
          "summary": "RHBZ#1568253",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-0737",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-0737"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-0737",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0737"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2018/04/16/3",
          "url": "http://www.openwall.com/lists/oss-security/2018/04/16/3"
        },
        {
          "category": "external",
          "summary": "https://www.openssl.org/news/secadv/20180416.txt",
          "url": "https://www.openssl.org/news/secadv/20180416.txt"
        }
      ],
      "release_date": "2018-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Alejandro Cabrera Aldaya"
          ],
          "organization": "Universidad Tecnologica de la Habana CUJAE; Cuba"
        },
        {
          "names": [
            "Billy Bob Brumley",
            "Cesar Pereida Garcia",
            "Sohaib ul Hassan"
          ]
        },
        {
          "names": [
            "Nicola Tuveri"
          ],
          "organization": "Tampere University of Technology; Finland"
        }
      ],
      "cve": "CVE-2018-5407",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2018-11-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1645695"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is a timing side-channel flaw on processors which implement SMT/Hyper-Threading architectures. It can result in leakage of secret data in applications such as OpenSSL that has secret dependent control flow at any granularity level. In order to exploit this flaw, the attacker needs to run a malicious process on the same core of the processor as the victim process.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "RHBZ#1645695",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-5407",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "https://github.com/bbbrumley/portsmash",
          "url": "https://github.com/bbbrumley/portsmash"
        },
        {
          "category": "external",
          "summary": "https://www.openssl.org/news/secadv/20181112.txt",
          "url": "https://www.openssl.org/news/secadv/20181112.txt"
        }
      ],
      "release_date": "2018-10-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        },
        {
          "category": "workaround",
          "details": "At this time Red Hat Engineering is working on patches for openssl package in Red Hat Enterprise Linux 7 to address this issue.  Until fixes are available, users are advised to review the guidance supplied in the L1 Terminal Fault vulnerability article: https://access.redhat.com/security/vulnerabilities/L1TF and decide what their exposure across shared CPU threads are and act accordingly.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)"
    },
    {
      "cve": "CVE-2018-17189",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-01-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1668497"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_http2: DoS via slow, unneeded request bodies",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-17189"
        },
        {
          "category": "external",
          "summary": "RHBZ#1668497",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668497"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-17189",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-17189"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17189",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17189"
        }
      ],
      "release_date": "2019-01-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_http2: DoS via slow, unneeded request bodies"
    },
    {
      "cve": "CVE-2018-17199",
      "cwe": {
        "id": "CWE-613",
        "name": "Insufficient Session Expiration"
      },
      "discovery_date": "2019-01-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1668493"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_session_cookie does not respect expiry time",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-17199"
        },
        {
          "category": "external",
          "summary": "RHBZ#1668493",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668493"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-17199",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-17199"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17199",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17199"
        }
      ],
      "release_date": "2019-01-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_session_cookie does not respect expiry time"
    },
    {
      "cve": "CVE-2019-0196",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2019-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1695030"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_http2: read-after-free on a string compare",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0196"
        },
        {
          "category": "external",
          "summary": "RHBZ#1695030",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0196",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0196"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196"
        },
        {
          "category": "external",
          "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
          "url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2019-04-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_http2: read-after-free on a string compare"
    },
    {
      "cve": "CVE-2019-0197",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2019-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1695042"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set \"H2Upgrade on\" are unaffected by this issue.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_http2: possible crash on late upgrade",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0197"
        },
        {
          "category": "external",
          "summary": "RHBZ#1695042",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0197",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0197"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197"
        },
        {
          "category": "external",
          "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
          "url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2019-02-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_http2: possible crash on late upgrade"
    },
    {
      "cve": "CVE-2019-0217",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2019-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1695020"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A race condition was found in mod_auth_digest when the web server was running in a threaded MPM configuration. It could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_auth_digest: access control bypass due to race condition",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Based on the the fact that digest authentication is rarely used in modern day web applications and httpd package shipped with Red Hat products do not ship threaded MPM configuration by default, this flaw has been rated as having Moderate level security impact. Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This flaw has been rated as having a security impact of Moderate, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0217"
        },
        {
          "category": "external",
          "summary": "RHBZ#1695020",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695020"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0217",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0217"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0217",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0217"
        },
        {
          "category": "external",
          "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
          "url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2019-04-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        },
        {
          "category": "workaround",
          "details": "This flaw only affects a threaded server configuration, so using the prefork MPM is an effective mitigation.  In versions of httpd package shipped with Red Hat Enterprise Linux 7, the prefork MPM is the default configuration.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_auth_digest: access control bypass due to race condition"
    },
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for Red Hat JBoss Enterprise Application Platform 7.2 for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.\n\nThis release of Red Hat JBoss Enterprise Application Platform 7.2.5 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.2.4, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.2.5 Release Notes for information about the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* undertow: HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* undertow: HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* undertow: HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* undertow: HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* wildfly-core: Incorrect privileges for \u0027Monitor\u0027, \u0027Auditor\u0027 and \u0027Deployer\u0027 user by default (CVE-2019-14838)\n\n* wildfly: wildfly-security-manager: security manager authorization bypass (CVE-2019-14843)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:4020",
        "url": "https://access.redhat.com/errata/RHSA-2019:4020"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1735745",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1751227",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1751227"
      },
      {
        "category": "external",
        "summary": "1752980",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752980"
      },
      {
        "category": "external",
        "summary": "JBEAP-17075",
        "url": "https://issues.redhat.com/browse/JBEAP-17075"
      },
      {
        "category": "external",
        "summary": "JBEAP-17220",
        "url": "https://issues.redhat.com/browse/JBEAP-17220"
      },
      {
        "category": "external",
        "summary": "JBEAP-17365",
        "url": "https://issues.redhat.com/browse/JBEAP-17365"
      },
      {
        "category": "external",
        "summary": "JBEAP-17476",
        "url": "https://issues.redhat.com/browse/JBEAP-17476"
      },
      {
        "category": "external",
        "summary": "JBEAP-17478",
        "url": "https://issues.redhat.com/browse/JBEAP-17478"
      },
      {
        "category": "external",
        "summary": "JBEAP-17483",
        "url": "https://issues.redhat.com/browse/JBEAP-17483"
      },
      {
        "category": "external",
        "summary": "JBEAP-17495",
        "url": "https://issues.redhat.com/browse/JBEAP-17495"
      },
      {
        "category": "external",
        "summary": "JBEAP-17496",
        "url": "https://issues.redhat.com/browse/JBEAP-17496"
      },
      {
        "category": "external",
        "summary": "JBEAP-17513",
        "url": "https://issues.redhat.com/browse/JBEAP-17513"
      },
      {
        "category": "external",
        "summary": "JBEAP-17521",
        "url": "https://issues.redhat.com/browse/JBEAP-17521"
      },
      {
        "category": "external",
        "summary": "JBEAP-17523",
        "url": "https://issues.redhat.com/browse/JBEAP-17523"
      },
      {
        "category": "external",
        "summary": "JBEAP-17547",
        "url": "https://issues.redhat.com/browse/JBEAP-17547"
      },
      {
        "category": "external",
        "summary": "JBEAP-17548",
        "url": "https://issues.redhat.com/browse/JBEAP-17548"
      },
      {
        "category": "external",
        "summary": "JBEAP-17560",
        "url": "https://issues.redhat.com/browse/JBEAP-17560"
      },
      {
        "category": "external",
        "summary": "JBEAP-17579",
        "url": "https://issues.redhat.com/browse/JBEAP-17579"
      },
      {
        "category": "external",
        "summary": "JBEAP-17582",
        "url": "https://issues.redhat.com/browse/JBEAP-17582"
      },
      {
        "category": "external",
        "summary": "JBEAP-17605",
        "url": "https://issues.redhat.com/browse/JBEAP-17605"
      },
      {
        "category": "external",
        "summary": "JBEAP-17631",
        "url": "https://issues.redhat.com/browse/JBEAP-17631"
      },
      {
        "category": "external",
        "summary": "JBEAP-17647",
        "url": "https://issues.redhat.com/browse/JBEAP-17647"
      },
      {
        "category": "external",
        "summary": "JBEAP-17665",
        "url": "https://issues.redhat.com/browse/JBEAP-17665"
      },
      {
        "category": "external",
        "summary": "JBEAP-17722",
        "url": "https://issues.redhat.com/browse/JBEAP-17722"
      },
      {
        "category": "external",
        "summary": "JBEAP-17874",
        "url": "https://issues.redhat.com/browse/JBEAP-17874"
      },
      {
        "category": "external",
        "summary": "JBEAP-17880",
        "url": "https://issues.redhat.com/browse/JBEAP-17880"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_4020.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.5 on RHEL 8 security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:38:51+00:00",
      "generator": {
        "date": "2024-11-05T21:38:51+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:4020",
      "initial_release_date": "2019-11-26T19:57:14+00:00",
      "revision_history": [
        {
          "date": "2019-11-26T19:57:14+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-11-26T19:57:14+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:38:51+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss EAP 7.2 for RHEL 8",
                "product": {
                  "name": "Red Hat JBoss EAP 7.2 for RHEL 8",
                  "product_id": "8Base-JBEAP-7.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.2::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Enterprise Application Platform"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
                "product": {
                  "name": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
                  "product_id": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketbox@5.0.3-6.Final_redhat_00005.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
                "product": {
                  "name": "eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
                  "product_id": "eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketbox-infinispan@5.0.3-6.Final_redhat_00005.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-undertow@2.0.26-2.SP3_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf@3.2.10-1.redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf-rt@3.2.10-1.redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf-services@3.2.10-1.redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf-tools@3.2.10-1.redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
                "product": {
                  "name": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
                  "product_id": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-glassfish-jsf@2.3.5-5.SP3_redhat_00003.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-byte-buddy@1.9.11-1.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar@1.4.18-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-common-api@1.4.18-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-common-impl@1.4.18-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-common-spi@1.4.18-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-core-api@1.4.18-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-core-impl@1.4.18-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-deployers-common@1.4.18-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-jdbc@1.4.18-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-validator@1.4.18-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-atom-provider@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-cdi@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-client@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-client-microprofile@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-crypto@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jackson-provider@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jackson2-provider@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jaxb-provider@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jaxrs@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jettison-provider@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jose-jwt@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jsapi@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-json-binding-provider@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-json-p-provider@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-multipart-provider@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-rxjava2@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-spring@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-validator-provider-11@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-yaml-provider@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-elytron-tool@1.4.4-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-http-client-common@1.0.17-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-http-ejb-client@1.0.17-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-http-naming-client@1.0.17-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-http-transaction-client@1.0.17-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hal-console@3.0.17-2.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-elytron@1.6.5-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hibernate@5.3.13-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hibernate-core@5.3.13-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hibernate-entitymanager@5.3.13-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hibernate-envers@5.3.13-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hibernate-java8@5.3.13-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                "product": {
                  "name": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_id": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-bindings@2.5.5-20.SP12_redhat_00009.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                "product": {
                  "name": "eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_id": "eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-wildfly8@2.5.5-20.SP12_redhat_00009.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                "product": {
                  "name": "eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_id": "eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-api@2.5.5-20.SP12_redhat_00009.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                "product": {
                  "name": "eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_id": "eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-common@2.5.5-20.SP12_redhat_00009.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                "product": {
                  "name": "eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_id": "eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-config@2.5.5-20.SP12_redhat_00009.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                "product": {
                  "name": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_id": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-federation@2.5.5-20.SP12_redhat_00009.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                "product": {
                  "name": "eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_id": "eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-idm-api@2.5.5-20.SP12_redhat_00009.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                "product": {
                  "name": "eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_id": "eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-idm-impl@2.5.5-20.SP12_redhat_00009.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                "product": {
                  "name": "eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_id": "eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-idm-simple-schema@2.5.5-20.SP12_redhat_00009.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                "product": {
                  "name": "eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_id": "eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-impl@2.5.5-20.SP12_redhat_00009.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-xnio-base@3.7.6-2.SP1_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-cli@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-core@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.0@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.0-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.1@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.1-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.2@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.0@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.0-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.1@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.1-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly11.0@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly11.0-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly12.0@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly12.0-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly13.0-server@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly14.0-server@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0-to-eap7.2@1.3.1-6.Final_redhat_00006.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-openssl@1.0.8-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-openssl-java@1.0.8-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-remoting@5.0.16-2.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-yasson@1.0.5-1.redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-genericjms@2.0.2-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-msc@1.4.11-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
                  "product_id": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly@7.2.5-4.GA_redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
                  "product_id": "eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-javadocs@7.2.5-4.GA_redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
                  "product_id": "eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-modules@7.2.5-4.GA_redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
                "product": {
                  "name": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
                  "product_id": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketbox@5.0.3-6.Final_redhat_00005.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
                  "product_id": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-undertow@2.0.26-2.SP3_redhat_00001.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
                  "product_id": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf@3.2.10-1.redhat_00001.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
                "product": {
                  "name": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
                  "product_id": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-glassfish-jsf@2.3.5-5.SP3_redhat_00003.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
                "product": {
                  "name": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
                  "product_id": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-byte-buddy@1.9.11-1.redhat_00002.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
                  "product_id": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar@1.4.18-1.Final_redhat_00001.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
                  "product_id": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy@3.6.1-7.SP7_redhat_00001.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
                  "product_id": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-elytron-tool@1.4.4-1.Final_redhat_00001.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
                  "product_id": "eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-http-client@1.0.17-1.Final_redhat_00001.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
                  "product_id": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hal-console@3.0.17-2.Final_redhat_00001.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
                  "product_id": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-elytron@1.6.5-1.Final_redhat_00001.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
                  "product_id": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-hibernate@5.3.13-1.Final_redhat_00001.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
                "product": {
                  "name": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
                  "product_id": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-bindings@2.5.5-20.SP12_redhat_00009.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
                "product": {
                  "name": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
                  "product_id": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-picketlink-federation@2.5.5-20.SP12_redhat_00009.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
                  "product_id": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-xnio-base@3.7.6-2.SP1_redhat_00001.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
                "product": {
                  "name": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
                  "product_id": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration@1.3.1-6.Final_redhat_00006.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
                  "product_id": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-openssl@1.0.8-1.Final_redhat_00001.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
                  "product_id": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-remoting@5.0.16-2.Final_redhat_00001.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src",
                  "product_id": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-yasson@1.0.5-1.redhat_00001.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
                  "product_id": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-genericjms@2.0.2-1.Final_redhat_00001.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
                  "product_id": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-msc@1.4.11-1.Final_redhat_00001.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
                "product": {
                  "name": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
                  "product_id": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly@7.2.5-4.GA_redhat_00002.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
                  "product_id": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-openssl-linux-x86_64@1.0.8-5.Final_redhat_00001.1.el8eap?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
                "product": {
                  "name": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
                  "product_id": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-openssl-linux-x86_64@1.0.8-5.Final_redhat_00001.1.el8eap?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
                "product": {
                  "name": "eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
                  "product_id": "eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-openssl-linux-x86_64-debuginfo@1.0.8-5.Final_redhat_00001.1.el8eap?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src"
        },
        "product_reference": "eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch"
        },
        "product_reference": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src"
        },
        "product_reference": "eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src"
        },
        "product_reference": "eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch"
        },
        "product_reference": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src"
        },
        "product_reference": "eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch"
        },
        "product_reference": "eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch"
        },
        "product_reference": "eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch"
        },
        "product_reference": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src"
        },
        "product_reference": "eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch"
        },
        "product_reference": "eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch"
        },
        "product_reference": "eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch"
        },
        "product_reference": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src"
        },
        "product_reference": "eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch"
        },
        "product_reference": "eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch"
        },
        "product_reference": "eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch"
        },
        "product_reference": "eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch"
        },
        "product_reference": "eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch"
        },
        "product_reference": "eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src"
        },
        "product_reference": "eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64 as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64"
        },
        "product_reference": "eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64 as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64"
        },
        "product_reference": "eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8",
          "product_id": "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-7.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
          "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T19:57:14+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.\n\nFor details about how to apply this update, see:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4020"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
          "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T19:57:14+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.\n\nFor details about how to apply this update, see:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4020"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
          "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T19:57:14+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.\n\nFor details about how to apply this update, see:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4020"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9515",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735745"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
          "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735745",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T19:57:14+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.\n\nFor details about how to apply this update, see:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4020"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "F\u00e1bio Magalh\u00e3es de Andrade"
          ],
          "organization": "Sonda Ativas"
        },
        {
          "names": [
            "Juliano de Castro Santos",
            "Leonard Lunardi"
          ],
          "organization": "UnimedBH"
        }
      ],
      "cve": "CVE-2019-14838",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2019-08-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1751227"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that Wildfly users had default user permissions set incorrectly. A malicious user could use this flaw to access unauthorized controls for the application server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly-core: Incorrect privileges for \u0027Monitor\u0027, \u0027Auditor\u0027 and \u0027Deployer\u0027 user by default",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
          "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14838"
        },
        {
          "category": "external",
          "summary": "RHBZ#1751227",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1751227"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14838",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14838"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14838",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14838"
        },
        {
          "category": "external",
          "summary": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14838",
          "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14838"
        }
      ],
      "release_date": "2019-10-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T19:57:14+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.\n\nFor details about how to apply this update, see:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4020"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wildfly-core: Incorrect privileges for \u0027Monitor\u0027, \u0027Auditor\u0027 and \u0027Deployer\u0027 user by default"
    },
    {
      "cve": "CVE-2019-14843",
      "cwe": {
        "id": "CWE-592",
        "name": "CWE-592"
      },
      "discovery_date": "2019-09-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1752980"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly-security-manager: security manager authorization bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
          "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
          "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14843"
        },
        {
          "category": "external",
          "summary": "RHBZ#1752980",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752980"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14843",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14843"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14843",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14843"
        }
      ],
      "release_date": "2019-09-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-26T19:57:14+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.\n\nFor details about how to apply this update, see:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:4020"
        },
        {
          "category": "workaround",
          "details": "This flaw only affects the Security Manager running under JDK 11 or 8. To mitigate exposure to this flaw, do not run under those JDK versions.",
          "product_ids": [
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-apache-cxf-rt-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-services-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-apache-cxf-tools-0:3.2.10-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-hibernate-core-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-entitymanager-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-envers-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-hibernate-java8-0:5.3.13-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-common-spi-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-api-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-core-impl-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-deployers-common-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-jdbc-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-ironjacamar-validator-0:1.4.18-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-cli-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-core-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-6.Final_redhat_00006.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketbox-infinispan-0:5.0.3-6.Final_redhat_00005.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00009.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-resteasy-atom-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-cdi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-client-microprofile-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-crypto-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jackson2-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxb-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jaxrs-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jettison-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jose-jwt-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-jsapi-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-binding-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-json-p-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-multipart-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-rxjava2-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-spring-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-validator-provider-11-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-resteasy-yaml-provider-0:3.6.1-7.SP7_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-http-client-common-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-ejb-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-naming-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-http-transaction-client-0:1.0.17-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-javadocs-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-modules-0:7.2.5-4.GA_redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-java-0:1.0.8-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-wildfly-openssl-linux-x86_64-debuginfo-0:1.0.8-5.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-7.2:eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "wildfly-security-manager: security manager authorization bypass"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat AMQ Broker 7.6 is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "AMQ Broker is a high-performance messaging implementation based on ActiveMQ Artemis. It uses an asynchronous journal for fast message persistence, and supports multiple languages, protocols, and platforms. \n\nThis release of Red Hat AMQ Broker 7.6.0 serves as a replacement for Red Hat AMQ Broker 7.5.0, and includes security and bug fixes, and enhancements. For further information, refer to the release notes linked to in the References section.\n\nSecurity Fix(es):\n\n* netty: HTTP request smuggling (CVE-2019-20444)\n\n* netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header (CVE-2019-20445)\n\n* jetty: HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* jetty: HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* jetty: HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* jetty: HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* jetty: HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)\n\n* jetty: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\n* jetty: HTTP/2: flood using empty frames results in excessive resource consumption (CVE-2019-9518)\n\n* jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions (CVE-2019-10241)\n\n* jetty: error path information disclosure (CVE-2019-10247)\n\n* mqtt-client: activemq: Corrupt MQTT frame can cause broker shutdown (CVE-2019-0222)\n\n* netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers (CVE-2019-16869)\n\n* netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling (CVE-2020-7238)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2020:0922",
        "url": "https://access.redhat.com/errata/RHSA-2020:0922"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=jboss.amq.broker\u0026version=7.6.0\u0026productChanged=yes",
        "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=jboss.amq.broker\u0026version=7.6.0\u0026productChanged=yes"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_amq/7.6/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_amq/7.6/"
      },
      {
        "category": "external",
        "summary": "1696012",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1696012"
      },
      {
        "category": "external",
        "summary": "1705924",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705924"
      },
      {
        "category": "external",
        "summary": "1705993",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705993"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1735745",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
      },
      {
        "category": "external",
        "summary": "1735749",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "external",
        "summary": "1758619",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758619"
      },
      {
        "category": "external",
        "summary": "1796225",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1796225"
      },
      {
        "category": "external",
        "summary": "1798509",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798509"
      },
      {
        "category": "external",
        "summary": "1798524",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798524"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0922.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat AMQ Broker 7.6 release and security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:55:23+00:00",
      "generator": {
        "date": "2024-11-05T21:55:23+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2020:0922",
      "initial_release_date": "2020-03-23T08:21:33+00:00",
      "revision_history": [
        {
          "date": "2020-03-23T08:21:33+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-03-23T08:21:33+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:55:23+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat AMQ",
                "product": {
                  "name": "Red Hat AMQ",
                  "product_id": "Red Hat AMQ",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:amq_broker:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss AMQ"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-0222",
      "discovery_date": "2019-03-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1696012"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "activemq: Corrupt MQTT frame can cause broker shutdown",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0222"
        },
        {
          "category": "external",
          "summary": "RHBZ#1696012",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1696012"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0222",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0222"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0222",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0222"
        }
      ],
      "release_date": "2019-03-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "activemq: Corrupt MQTT frame can cause broker shutdown"
    },
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat AMQ"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9515",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735745"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735745",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat AMQ"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "Red Hat AMQ"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9518",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735749"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using frames with an empty payload, a flood could occur that results in excessive CPU usage and starvation of other clients. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using empty frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735749",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9518",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using empty frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-10241",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2019-04-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1705924"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the versions of jetty which is embedded in the nutch package as shipped with Red Hat Satellite 5. The jetty server is not exposed, as such exploitation is difficult, Red Hat Product Security has rated this issue as having security impact of Low in the context of Red Hat Satellite 5. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10241"
        },
        {
          "category": "external",
          "summary": "RHBZ#1705924",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705924"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10241",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10241"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10241",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10241"
        }
      ],
      "release_date": "2019-04-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions"
    },
    {
      "cve": "CVE-2019-10247",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-04-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1705993"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches the requested path. The default server behavior on jetty-distribution and jetty-home will include at the end of the Handler tree a DefaultHandler, which is responsible for reporting this 404 error, it presents the various configured contexts as HTML for users to click through to. This produced HTML includes output that contains the configured fully qualified directory base resource location for each context.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jetty: error path information disclosure",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the versions of jetty which is embedded in the nutch package as shipped with Red Hat Satellite 5. The jetty server is not exposed, as such exploitation is difficult, Red Hat Product Security has rated this issue as having security impact of Low in the context of Red Hat Satellite 5. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10247"
        },
        {
          "category": "external",
          "summary": "RHBZ#1705993",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705993"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10247",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10247"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10247",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10247"
        }
      ],
      "release_date": "2019-04-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "jetty: error path information disclosure"
    },
    {
      "cve": "CVE-2019-16869",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2019-09-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1758619"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty, where whitespace before the colon in HTTP headers is mishandled. This flaw allows an attacker to cause HTTP request smuggling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that this vulnerability does not poses a substantial practical threat to ElasticSearch 6 [1]. We agree that this issue would be difficult to exploit these vulnerabilities on OpenShift Container Platform, so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships vulnerable netty version embedded in Candlepin, however, is not directly vulnerable since HTTP requests are handled by Tomcat and not netty.\n\n[1]  https://github.com/elastic/elasticsearch/issues/49396",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-16869"
        },
        {
          "category": "external",
          "summary": "RHBZ#1758619",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758619"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-16869",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-16869"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-16869",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16869"
        }
      ],
      "release_date": "2019-09-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Red Hat AMQ"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers"
    },
    {
      "cve": "CVE-2019-20444",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2020-01-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1798524"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF (carriage return, line feed) without being followed by SP (space) or HTAB (horizontal tab), result in situations where headers can be misread. Data integrity is the highest threat with this vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HTTP request smuggling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that the previous vulnerability, CVE-2019-16869, does not pose a substantial practical threat to ElasticSearch 6. We agree that these issues would be difficult to exploit on OpenShift Container Platform so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships a vulnerable version of netty embedded in Candlepin. However, the flaw can not be triggered in that context, because HTTP requests are handled by Tomcat, not by netty. A future release may fix this.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-20444"
        },
        {
          "category": "external",
          "summary": "RHBZ#1798524",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798524"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20444",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-20444"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20444",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20444"
        },
        {
          "category": "external",
          "summary": "https://github.com/elastic/elasticsearch/issues/49396",
          "url": "https://github.com/elastic/elasticsearch/issues/49396"
        }
      ],
      "release_date": "2020-01-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Red Hat AMQ"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HTTP request smuggling"
    },
    {
      "cve": "CVE-2019-20445",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2020-01-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1798509"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty before version 4.1.44, where it accepted multiple Content-Length headers and also accepted both Transfer-Encoding, as well as Content-Length headers where it should reject the message under such circumstances. In circumstances where Netty is used in the context of a server, it could result in a viable HTTP smuggling vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that the previous vulnerability, CVE-2019-16869, does not poses a substantial practical threat to ElasticSearch 6 [1]. We agree that this issue would be difficult to exploit both these vulnerabilities on OpenShift Container Platform, so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships a vulnerable version of netty embedded in Candlepin. However, the flaw can not be triggered in that context, because HTTP requests are handled by Tomcat, not by netty. A future release may fix this.\n\n[1]  https://github.com/elastic/elasticsearch/issues/49396",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-20445"
        },
        {
          "category": "external",
          "summary": "RHBZ#1798509",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798509"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20445",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-20445"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20445",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20445"
        }
      ],
      "release_date": "2020-01-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Red Hat AMQ"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header"
    },
    {
      "cve": "CVE-2020-7238",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2020-01-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1796225"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty, where it mishandles Transfer-Encoding whitespace. This flaw allows HTTP Request Smuggling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that the previous vulnerability, CVE-2019-16869, does not poses a substantial practical threat to ElasticSearch 6 [1]. We agree that this issue would be difficult to exploit both these vulnerabilities on OpenShift Container Platform, so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships vulnerable netty version embedded in Candlepin, however, is not directly vulnerable since HTTP requests are handled by Tomcat and not netty.\n\n[1]  https://github.com/elastic/elasticsearch/issues/49396",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-7238"
        },
        {
          "category": "external",
          "summary": "RHBZ#1796225",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1796225"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-7238",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-7238"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7238",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7238"
        },
        {
          "category": "external",
          "summary": "https://netty.io/news/2019/12/18/4-1-44-Final.html",
          "url": "https://netty.io/news/2019/12/18/4-1-44-Final.html"
        }
      ],
      "release_date": "2020-01-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Red Hat AMQ"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2019-9511"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-770"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2019-08-13T21:15:00Z",
    "severity": "HIGH"
  },
  "details": "Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.",
  "id": "GHSA-89fc-749h-w2fj",
  "modified": "2022-08-13T00:00:31Z",
  "published": "2022-05-24T16:53:17Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BP556LEG3WENHZI5TAQ6ZEBFTJB4E2IS"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JUBYAF6ED3O4XCHQ5C2HYENJLXYXZC4M"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZLUYPYY3RX4ZJDWZRJIKSULYRJ4PXW7"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XHTKU7YQ5EEP2XNSAV4M4VJ7QCBOJMOD"
    },
    {
      "type": "WEB",
      "url": "https://seclists.org/bugtraq/2019/Aug/40"
    },
    {
      "type": "WEB",
      "url": "https://seclists.org/bugtraq/2019/Sep/1"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20190823-0002"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20190823-0005"
    },
    {
      "type": "WEB",
      "url": "https://support.f5.com/csp/article/K02591030"
    },
    {
      "type": "WEB",
      "url": "https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp;utm_medium=RSS"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/4099-1"
    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2019/dsa-4505"
    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2019/dsa-4511"
    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2020/dsa-4669"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpujan2021.html"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
    },
    {
      "type": "WEB",
      "url": "https://www.synology.com/security/advisory/Synology_SA_19_33"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2692"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2745"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2746"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2775"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2799"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2925"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2939"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2949"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2955"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2966"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:3041"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:3932"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:3933"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:3935"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:4018"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:4019"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:4020"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:4021"
    },
    {
      "type": "WEB",
      "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
    },
    {
      "type": "WEB",
      "url": "https://kb.cert.org/vuls/id/605641"
    },
    {
      "type": "WEB",
      "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00003.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00005.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201908-0421",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "leap",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "opensuse",
        "version": "15.1"
      },
      {
        "model": "enterprise communications broker",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "3.1.0"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "10.0"
      },
      {
        "model": "web gateway",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "mcafee",
        "version": "7.7.2.0"
      },
      {
        "model": "web gateway",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "mcafee",
        "version": "7.7.2.24"
      },
      {
        "model": "vs960hd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "synology",
        "version": null
      },
      {
        "model": "node.js",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "nodejs",
        "version": "8.16.1"
      },
      {
        "model": "node.js",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "nodejs",
        "version": "10.12.0"
      },
      {
        "model": "openshift service mesh",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "1.0"
      },
      {
        "model": "software collections",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "1.0"
      },
      {
        "model": "node.js",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "nodejs",
        "version": "8.9.0"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "29"
      },
      {
        "model": "graalvm",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "19.2.0"
      },
      {
        "model": "node.js",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "nodejs",
        "version": "10.0.0"
      },
      {
        "model": "jboss enterprise application platform",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.2.0"
      },
      {
        "model": "web gateway",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "mcafee",
        "version": "8.2.0"
      },
      {
        "model": "nginx",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "1.17.0"
      },
      {
        "model": "jboss enterprise application platform",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.3.0"
      },
      {
        "model": "node.js",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "nodejs",
        "version": "12.0.0"
      },
      {
        "model": "node.js",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "nodejs",
        "version": "10.13.0"
      },
      {
        "model": "nginx",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "1.17.2"
      },
      {
        "model": "traffic server",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "apache",
        "version": "8.0.0"
      },
      {
        "model": "node.js",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "nodejs",
        "version": "8.0.0"
      },
      {
        "model": "enterprise communications broker",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "3.2.0"
      },
      {
        "model": "diskstation manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "synology",
        "version": "6.2"
      },
      {
        "model": "node.js",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "nodejs",
        "version": "12.8.1"
      },
      {
        "model": "swiftnio",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "apple",
        "version": "1.4.0"
      },
      {
        "model": "traffic server",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "apache",
        "version": "7.0.0"
      },
      {
        "model": "quay",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "3.0.0"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "9.0"
      },
      {
        "model": "jboss core services",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "1.0"
      },
      {
        "model": "traffic server",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "apache",
        "version": "7.1.6"
      },
      {
        "model": "enterprise linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "8.0"
      },
      {
        "model": "web gateway",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "mcafee",
        "version": "8.1.0"
      },
      {
        "model": "node.js",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "nodejs",
        "version": "10.16.3"
      },
      {
        "model": "nginx",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "1.9.5"
      },
      {
        "model": "leap",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "opensuse",
        "version": "15.0"
      },
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "16.04"
      },
      {
        "model": "traffic server",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "apache",
        "version": "8.0.3"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "30"
      },
      {
        "model": "web gateway",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "mcafee",
        "version": "7.8.2.13"
      },
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "18.04"
      },
      {
        "model": "skynas",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "synology",
        "version": null
      },
      {
        "model": "nginx",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "f5",
        "version": "1.16.1"
      },
      {
        "model": "swiftnio",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "apple",
        "version": "1.0.0"
      },
      {
        "model": "web gateway",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "mcafee",
        "version": "7.8.2.0"
      },
      {
        "model": "node.js",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "nodejs",
        "version": "8.8.1"
      },
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "19.04"
      },
      {
        "model": "traffic server",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "apache",
        "version": "6.0.0"
      },
      {
        "model": "traffic server",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "apache",
        "version": "6.2.3"
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "akamai",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "amazon",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "apache traffic server",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "apple",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "cloudflare",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "envoy",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "facebook",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "go programming language",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "litespeed",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "microsoft",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "netty",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "node js",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "synology",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "twisted",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "ubuntu",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "grpc",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "nghttp2",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "nginx",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#605641"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9511"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:a:apple:swiftnio:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndIncluding": "1.4.0",
                    "versionStartIncluding": "1.0.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionStartIncluding": "10.12",
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionStartIncluding": "14.04",
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "8.0.3",
                "versionStartIncluding": "8.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "7.1.6",
                "versionStartIncluding": "7.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "6.2.3",
                "versionStartIncluding": "6.0.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:synology:skynas:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:synology:diskstation_manager:6.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_core_services:1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:quay:3.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:openshift_service_mesh:1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:oracle:graalvm:19.2.0:*:*:*:enterprise:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.7.2.24",
                "versionStartIncluding": "7.7.2.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.8.2.13",
                "versionStartIncluding": "7.8.2.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "8.2.0",
                "versionStartIncluding": "8.1.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "1.16.1",
                "versionStartIncluding": "1.9.5",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "1.17.2",
                "versionStartIncluding": "1.17.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:oracle:enterprise_communications_broker:3.1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:enterprise_communications_broker:3.2.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "8.8.1",
                "versionStartIncluding": "8.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "10.12.0",
                "versionStartIncluding": "10.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "12.8.1",
                "versionStartIncluding": "12.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "10.16.3",
                "versionStartIncluding": "10.13.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "8.16.1",
                "versionStartIncluding": "8.9.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2019-9511"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Red Hat",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "154510"
      },
      {
        "db": "PACKETSTORM",
        "id": "155479"
      },
      {
        "db": "PACKETSTORM",
        "id": "158636"
      },
      {
        "db": "PACKETSTORM",
        "id": "157214"
      },
      {
        "db": "PACKETSTORM",
        "id": "155416"
      },
      {
        "db": "PACKETSTORM",
        "id": "154693"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2019-9511",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "acInsufInfo": false,
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "NVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "severity": "HIGH",
            "trust": 1.0,
            "userInteractionRequired": false,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "VHN-160946",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "NVD",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "cret@cert.org",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2019-9511",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "cret@cert.org",
            "id": "CVE-2019-9511",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "VULHUB",
            "id": "VHN-160946",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-160946"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9511"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9511"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both. Multiple HTTP/2 implementations are vulnerable to a variety of denial-of-service (DoS) attacks. HTTP/2 is the second version of the hypertext transfer protocol, which is mainly used to ensure the communication between the client and the server. A resource management error vulnerability exists in HTTP/2. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n====================================================================                   \nRed Hat Security Advisory\n\nSynopsis:          Important: rh-nginx114-nginx security update\nAdvisory ID:       RHSA-2019:2775-01\nProduct:           Red Hat Software Collections\nAdvisory URL:      https://access.redhat.com/errata/RHSA-2019:2775\nIssue date:        2019-09-16\nCVE Names:         CVE-2019-9511 CVE-2019-9513 CVE-2019-9516\n====================================================================\n1. Summary:\n\nAn update for rh-nginx114-nginx is now available for Red Hat Software\nCollections. \n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) - aarch64, ppc64le, s390x, x86_64\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) - ppc64le, s390x, x86_64\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) - ppc64le, s390x, x86_64\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) - ppc64le, s390x, x86_64\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) - ppc64le, s390x, x86_64\nRed Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) - x86_64\n\n3. Description:\n\nnginx is a web and proxy server supporting HTTP and other protocols, with a\nfocus on high concurrency, performance, and low memory usage. \n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data request leads to denial of service\n(CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource\nconsumption (CVE-2019-9513)\n\n* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section. \n\n4. Solution:\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx114-nginx service must be restarted for this update to take\neffect. \n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n1735741 - CVE-2019-9513 HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption\n1741860 - CVE-2019-9511 HTTP/2: large amount of data requests leads to denial of service\n1741864 - CVE-2019-9516 HTTP/2: 0-length headers lead to denial of service\n\n6. Package List:\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server (v. 7):\n\nSource:\nrh-nginx114-nginx-1.14.1-1.el7.1.src.rpm\n\naarch64:\nrh-nginx114-nginx-1.14.1-1.el7.1.aarch64.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.aarch64.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.aarch64.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.aarch64.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.aarch64.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.aarch64.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.aarch64.rpm\n\nppc64le:\nrh-nginx114-nginx-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.ppc64le.rpm\n\ns390x:\nrh-nginx114-nginx-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.s390x.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server (v. 7):\n\nSource:\nrh-nginx114-nginx-1.14.1-1.el7.1.src.rpm\n\naarch64:\nrh-nginx114-nginx-1.14.1-1.el7.1.aarch64.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.aarch64.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.aarch64.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.aarch64.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.aarch64.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.aarch64.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.aarch64.rpm\n\nppc64le:\nrh-nginx114-nginx-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.ppc64le.rpm\n\ns390x:\nrh-nginx114-nginx-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.s390x.rpm\n\nx86_64:\nrh-nginx114-nginx-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.x86_64.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4):\n\nSource:\nrh-nginx114-nginx-1.14.1-1.el7.1.src.rpm\n\nppc64le:\nrh-nginx114-nginx-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.ppc64le.rpm\n\ns390x:\nrh-nginx114-nginx-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.s390x.rpm\n\nx86_64:\nrh-nginx114-nginx-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.x86_64.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5):\n\nSource:\nrh-nginx114-nginx-1.14.1-1.el7.1.src.rpm\n\nppc64le:\nrh-nginx114-nginx-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.ppc64le.rpm\n\ns390x:\nrh-nginx114-nginx-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.s390x.rpm\n\nx86_64:\nrh-nginx114-nginx-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.x86_64.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6):\n\nSource:\nrh-nginx114-nginx-1.14.1-1.el7.1.src.rpm\n\nppc64le:\nrh-nginx114-nginx-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.ppc64le.rpm\n\ns390x:\nrh-nginx114-nginx-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.s390x.rpm\n\nx86_64:\nrh-nginx114-nginx-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.x86_64.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7):\n\nSource:\nrh-nginx114-nginx-1.14.1-1.el7.1.src.rpm\n\nppc64le:\nrh-nginx114-nginx-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.ppc64le.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.ppc64le.rpm\n\ns390x:\nrh-nginx114-nginx-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.s390x.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.s390x.rpm\n\nx86_64:\nrh-nginx114-nginx-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.x86_64.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7):\n\nSource:\nrh-nginx114-nginx-1.14.1-1.el7.1.src.rpm\n\nx86_64:\nrh-nginx114-nginx-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-debuginfo-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-http-image-filter-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-http-perl-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-http-xslt-filter-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-mail-1.14.1-1.el7.1.x86_64.rpm\nrh-nginx114-nginx-mod-stream-1.14.1-1.el7.1.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security.  Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2019-9511\nhttps://access.redhat.com/security/cve/CVE-2019-9513\nhttps://access.redhat.com/security/cve/CVE-2019-9516\nhttps://access.redhat.com/security/updates/classification/#important\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2019 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n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\n3Z3oFnpnL5o=L5z9\n-----END PGP SIGNATURE-----\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n. Description:\n\nRed Hat JBoss Enterprise Application Platform 7 is a platform for Java\napplications based on the WildFly application runtime. Solution:\n\nBefore applying this update, ensure all previously released errata relevant\nto your system have been applied. JIRA issues fixed (https://issues.jboss.org/):\n\nJBEAP-17075 - (7.2.z) Upgrade yasson from 1.0.2.redhat-00001 to 1.0.5\nJBEAP-17220 - (7.2.x) HHH-13504 Upgrade ByteBuddy to 1.9.11\nJBEAP-17365 - [GSS](7.2.z) Upgrade RESTEasy from 3.6.1.SP6 to 3.6.1.SP7\nJBEAP-17476 - [GSS](7.2.z) Upgrade Generic JMS RA 2.0.2.Final\nJBEAP-17478 - [GSS](7.2.z) Upgrade JBoss Remoting from 5.0.14.SP1 to 5.0.16.Final\nJBEAP-17483 - [GSS](7.2.z) Upgrade Apache CXF from 3.2.9 to 3.2.10\nJBEAP-17495 - (7.2.z) Upgrade PicketLink from 2.5.5.SP12-redhat-00007 to 2.5.5.SP12-redhat-00009\nJBEAP-17496 - (7.2.z) Upgrade PicketLink bindings from 2.5.5.SP12-redhat-00007 to 2.5.5.SP12-redhat-00009\nJBEAP-17513 - [GSS](7.2.z) Upgrade Hibernate ORM from 5.3.11.SP1 to 5.3.13\nJBEAP-17521 - (7.2.z) Upgrade picketbox from 5.0.3.Final-redhat-00004 to 5.0.3.Final-redhat-00005\nJBEAP-17523 - [GSS](7.2.z) Upgrade wildfly-core from 6.0.16 to 6.0.17\nJBEAP-17547 - [GSS](7.2.z) Upgrade Elytron-Tool from 1.4.3 to 1.4.4.Final\nJBEAP-17548 - [GSS](7.2.z) Upgrade Elytron from 1.6.4.Final-redhat-00001 to 1.6.5.Final-redhat-00001\nJBEAP-17560 - [GSS](7.2.z) Upgrade HAL from 3.0.16 to 3.0.17\nJBEAP-17579 - [GSS](7.2.z) Upgrade JBoss MSC from 1.4.8 to 1.4.11\nJBEAP-17582 - [GSS](7.2.z) Upgrade JSF based on Mojarra 2.3.5.SP3-redhat-00002 to 2.3.5.SP3-redhat-00003\nJBEAP-17605 - Tracker bug for the EAP 7.2.5 release for RHEL-8\nJBEAP-17631 - [GSS](7.2.z) Upgrade Undertow from 2.0.25.SP1 to 2.0.26.SP3\nJBEAP-17647 - [GSS](7.2.z) Upgrade IronJacamar from 1.4.17.Final to 1.4.18.Final\nJBEAP-17665 - [GSS](7.2.z) Upgrade XNIO from 3.7.3.Final-redhat-00001 to 3.7.6.Final\nJBEAP-17722 - [GSS](7.2.z) Upgrade wildfly-http-client from 1.0.15.Final-redhat-00001 to 1.0.17.Final\nJBEAP-17874 - (7.2.z) Upgrade to wildfly-openssl 1.0.8\nJBEAP-17880 - (7.2.z) Upgrade XNIO from 3.7.6.Final-redhat-00001 to 3.7.6.SP1\n\n7. \n\nFor the oldstable distribution (stretch), these problems have been fixed\nin version 1.10.3-1+deb9u3. \n\nFor the stable distribution (buster), these problems have been fixed in\nversion 1.14.2-2+deb10u1. \n\nWe recommend that you upgrade your nginx packages. \n\nFor the detailed security status of nginx please refer to\nits security tracker page at:\nhttps://security-tracker.debian.org/tracker/nginx\n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----\n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\na3a/Y53cX1QYt60eiE6x/ifraOHzcsJglrUNmK8VPfJ9tSTFhWY=+ZOE\n-----END PGP SIGNATURE-----\n. \nThe purpose of this text-only errata is to inform you about the security\nissues fixed in this release. \n\nInstallation instructions are available from the Fuse 7.7.0 product\ndocumentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/\n\n4. Bugs fixed (https://bugzilla.redhat.com/):\n\n1343616 - CVE-2016-4970 netty: Infinite loop vulnerability when handling renegotiation using SslProvider.OpenSsl\n1620529 - CVE-2018-1000632 dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents\n1632452 - CVE-2018-3831 elasticsearch: Information exposure via _cluster/settings API\n1637492 - CVE-2018-11797 pdfbox: unbounded computation in parser resulting in a denial of service\n1638391 - CVE-2018-12541 vertx: WebSocket HTTP upgrade implementation holds the entire http request in memory before the handshake\n1697598 - CVE-2019-3797 spring-data-jpa: Additional information exposure with Spring Data JPA derived queries\n1700016 - CVE-2019-0231 mina-core: Retaining an open socket in close_notify SSL-TLS leading to Information disclosure. \n1713468 - CVE-2019-12086 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. \n1715075 - CVE-2019-10172 jackson-mapper-asl: XML external entity similar to CVE-2016-3720\n1728604 - CVE-2019-9827 hawtio: server side request forgery via initial /proxy/ substring of a URI\n1741860 - CVE-2019-9511 HTTP/2: large amount of data requests leads to denial of service\n1752770 - CVE-2020-1757 undertow: servletPath is normalized incorrectly leading to dangerous application mapping which could result in security bypass\n1755831 - CVE-2019-16335 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource\n1755849 - CVE-2019-14540 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig\n1758167 - CVE-2019-17267 jackson-databind: Serialization gadgets in classes of the ehcache package\n1758171 - CVE-2019-14892 jackson-databind: Serialization gadgets in classes of the commons-configuration package\n1758182 - CVE-2019-14893 jackson-databind: Serialization gadgets in classes of the xalan package\n1758187 - CVE-2019-16942 jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*\n1758191 - CVE-2019-16943 jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource\n1764658 - CVE-2019-12400 xml-security: Apache Santuario potentially loads XML parsing code from an untrusted source\n1767483 - CVE-2019-10086 apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default\n1772464 - CVE-2019-14888 undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS\n1775293 - CVE-2019-17531 jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*\n1793154 - CVE-2019-20330 jackson-databind: lacks certain net.sf.ehcache blocking\n1796225 - CVE-2020-7238 netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling\n1797011 - CVE-2019-17573 cxf: reflected XSS in the services listing page\n1798509 - CVE-2019-20445 netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header\n1798524 - CVE-2019-20444 netty: HTTP request smuggling\n1807305 - CVE-2020-1745 undertow: AJP File Read/Inclusion Vulnerability\n1815212 - CVE-2020-1953 apache-commons-configuration: uncontrolled class instantiation when loading YAML files\n1815470 - CVE-2020-10673 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution\n1815495 - CVE-2020-10672 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution\n1816330 - CVE-2020-8840 jackson-databind: Lacks certain xbean-reflect/JNDI blocking\n1816332 - CVE-2020-9546 jackson-databind: Serialization gadgets in shaded-hikari-config\n1816337 - CVE-2020-9547 jackson-databind: Serialization gadgets in ibatis-sqlmap\n1816340 - CVE-2020-9548 jackson-databind: Serialization gadgets in anteros-core\n1819208 - CVE-2020-10968 jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider\n1819212 - CVE-2020-10969 jackson-databind: Serialization gadgets in javax.swing.JEditorPane\n1821304 - CVE-2020-11111 jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory\n1821311 - CVE-2020-11112 jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider\n1821315 - CVE-2020-11113 jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime\n1826798 - CVE-2020-11620 jackson-databind: Serialization gadgets in commons-jelly:commons-jelly\n1826805 - CVE-2020-11619 jackson-databind: Serialization gadgets in org.springframework:spring-aop\n1848958 - CVE-2020-14195 jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory\n1848960 - CVE-2020-14060 jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool\n1848962 - CVE-2020-14062 jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool\n1848966 - CVE-2020-14061 jackson-databind: serialization in weblogic/oracle-aqjms\n\n5. Description:\n\nAMQ Broker is a high-performance messaging implementation based on ActiveMQ\nArtemis. It uses an asynchronous journal for fast message persistence, and\nsupports multiple languages, protocols, and platforms. Solution:\n\nBefore applying the update, back up your existing installation, including\nall applications, configuration files, databases and database settings, and\nso on. \n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Description:\n\nThis release adds the new Apache HTTP Server 2.4.37 packages that are part\nof the JBoss Core Services offering. \n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack\nApache Server 2.4.29 and includes bug fixes and enhancements. Refer to the\nRelease Notes for information on the most significant bug fixes and\nenhancements included in this release. After installing the updated\npackages, the httpd daemon will be restarted automatically. 7) - noarch, x86_64\n\n3. Description:\n\nNode.js is a software development platform for building fast and scalable\nnetwork applications in the JavaScript programming language. \n\nThe following packages have been upgraded to a later upstream version:\nrh-nodejs10-nodejs (10.16.3). ==========================================================================\nUbuntu Security Notice USN-6754-1\nApril 25, 2024\n\nnghttp2 vulnerabilities\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 23.10\n- Ubuntu 22.04 LTS\n- Ubuntu 20.04 LTS\n- Ubuntu 18.04 LTS (Available with Ubuntu Pro)\n- Ubuntu 16.04 LTS (Available with Ubuntu Pro)\n\nSummary:\n\nSeveral security issues were fixed in nghttp2. \n\nSoftware Description:\n- nghttp2: HTTP/2 C Library and tools\n\nDetails:\n\nIt was discovered that nghttp2 incorrectly handled the HTTP/2\nimplementation. A remote attacker could possibly use this issue to cause\nnghttp2 to consume resources, leading to a denial of service. This issue\nonly affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-9511,\nCVE-2019-9513)\n\nIt was discovered that nghttp2 incorrectly handled request cancellation. A\nremote attacker could possibly use this issue to cause nghttp2 to consume\nresources, leading to a denial of service. This issue only affected Ubuntu\n16.04 LTS and Ubuntu 18.04 LTS. (CVE-2023-44487)\n\nIt was discovered that nghttp2 could be made to process an unlimited number\nof HTTP/2 CONTINUATION frames. A remote attacker could possibly use this\nissue to cause nghttp2 to consume resources, leading to a denial of\nservice. (CVE-2024-28182)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 23.10:\n   libnghttp2-14                   1.55.1-1ubuntu0.2\n   nghttp2                         1.55.1-1ubuntu0.2\n   nghttp2-client                  1.55.1-1ubuntu0.2\n   nghttp2-proxy                   1.55.1-1ubuntu0.2\n   nghttp2-server                  1.55.1-1ubuntu0.2\n\nUbuntu 22.04 LTS:\n   libnghttp2-14                   1.43.0-1ubuntu0.2\n   nghttp2                         1.43.0-1ubuntu0.2\n   nghttp2-client                  1.43.0-1ubuntu0.2\n   nghttp2-proxy                   1.43.0-1ubuntu0.2\n   nghttp2-server                  1.43.0-1ubuntu0.2\n\nUbuntu 20.04 LTS:\n   libnghttp2-14                   1.40.0-1ubuntu0.3\n   nghttp2                         1.40.0-1ubuntu0.3\n   nghttp2-client                  1.40.0-1ubuntu0.3\n   nghttp2-proxy                   1.40.0-1ubuntu0.3\n   nghttp2-server                  1.40.0-1ubuntu0.3\n\nUbuntu 18.04 LTS (Available with Ubuntu Pro):\n   libnghttp2-14                   1.30.0-1ubuntu1+esm2\n   nghttp2                         1.30.0-1ubuntu1+esm2\n   nghttp2-client                  1.30.0-1ubuntu1+esm2\n   nghttp2-proxy                   1.30.0-1ubuntu1+esm2\n   nghttp2-server                  1.30.0-1ubuntu1+esm2\n\nUbuntu 16.04 LTS (Available with Ubuntu Pro):\n   libnghttp2-14                   1.7.1-1ubuntu0.1~esm2\n   nghttp2                         1.7.1-1ubuntu0.1~esm2\n   nghttp2-client                  1.7.1-1ubuntu0.1~esm2\n   nghttp2-proxy                   1.7.1-1ubuntu0.1~esm2\n   nghttp2-server                  1.7.1-1ubuntu0.1~esm2\n\nIn general, a standard system update will make all the necessary changes",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2019-9511"
      },
      {
        "db": "CERT/CC",
        "id": "VU#605641"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160946"
      },
      {
        "db": "PACKETSTORM",
        "id": "154510"
      },
      {
        "db": "PACKETSTORM",
        "id": "155479"
      },
      {
        "db": "PACKETSTORM",
        "id": "154190"
      },
      {
        "db": "PACKETSTORM",
        "id": "158636"
      },
      {
        "db": "PACKETSTORM",
        "id": "157214"
      },
      {
        "db": "PACKETSTORM",
        "id": "155416"
      },
      {
        "db": "PACKETSTORM",
        "id": "154693"
      },
      {
        "db": "PACKETSTORM",
        "id": "168812"
      },
      {
        "db": "PACKETSTORM",
        "id": "178284"
      }
    ],
    "trust": 2.52
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2019-9511",
        "trust": 2.0
      },
      {
        "db": "CERT/CC",
        "id": "VU#605641",
        "trust": 1.9
      },
      {
        "db": "MCAFEE",
        "id": "SB10296",
        "trust": 1.1
      },
      {
        "db": "PACKETSTORM",
        "id": "158636",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "154693",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "154510",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "154190",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "154725",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "154284",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "154401",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "154712",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "154117",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "154663",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "154471",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "154699",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "154533",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "154470",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "154848",
        "trust": 0.1
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201908-924",
        "trust": 0.1
      },
      {
        "db": "VULHUB",
        "id": "VHN-160946",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "155479",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "157214",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "155416",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "168812",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "178284",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#605641"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160946"
      },
      {
        "db": "PACKETSTORM",
        "id": "154510"
      },
      {
        "db": "PACKETSTORM",
        "id": "155479"
      },
      {
        "db": "PACKETSTORM",
        "id": "154190"
      },
      {
        "db": "PACKETSTORM",
        "id": "158636"
      },
      {
        "db": "PACKETSTORM",
        "id": "157214"
      },
      {
        "db": "PACKETSTORM",
        "id": "155416"
      },
      {
        "db": "PACKETSTORM",
        "id": "154693"
      },
      {
        "db": "PACKETSTORM",
        "id": "168812"
      },
      {
        "db": "PACKETSTORM",
        "id": "178284"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9511"
      }
    ]
  },
  "id": "VAR-201908-0421",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-160946"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2024-07-23T19:49:30.261000Z",
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-770",
        "trust": 1.1
      },
      {
        "problemtype": "CWE-400",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-160946"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9511"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.9,
        "url": "https://github.com/netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
      },
      {
        "trust": 1.9,
        "url": "https://www.synology.com/security/advisory/synology_sa_19_33"
      },
      {
        "trust": 1.6,
        "url": "https://blogs.akamai.com/sitr/2019/08/http2-vulnerabilities.html"
      },
      {
        "trust": 1.2,
        "url": "https://access.redhat.com/errata/rhsa-2019:2775"
      },
      {
        "trust": 1.2,
        "url": "https://access.redhat.com/errata/rhsa-2019:2939"
      },
      {
        "trust": 1.2,
        "url": "https://access.redhat.com/errata/rhsa-2019:3933"
      },
      {
        "trust": 1.2,
        "url": "https://access.redhat.com/errata/rhsa-2019:4020"
      },
      {
        "trust": 1.1,
        "url": "https://seclists.org/bugtraq/2019/aug/40"
      },
      {
        "trust": 1.1,
        "url": "https://seclists.org/bugtraq/2019/sep/1"
      },
      {
        "trust": 1.1,
        "url": "https://kb.cert.org/vuls/id/605641/"
      },
      {
        "trust": 1.1,
        "url": "https://security.netapp.com/advisory/ntap-20190823-0002/"
      },
      {
        "trust": 1.1,
        "url": "https://security.netapp.com/advisory/ntap-20190823-0005/"
      },
      {
        "trust": 1.1,
        "url": "https://support.f5.com/csp/article/k02591030"
      },
      {
        "trust": 1.1,
        "url": "https://www.debian.org/security/2019/dsa-4505"
      },
      {
        "trust": 1.1,
        "url": "https://www.debian.org/security/2019/dsa-4511"
      },
      {
        "trust": 1.1,
        "url": "https://www.debian.org/security/2020/dsa-4669"
      },
      {
        "trust": 1.1,
        "url": "https://www.oracle.com/security-alerts/cpujan2021.html"
      },
      {
        "trust": 1.1,
        "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
      },
      {
        "trust": 1.1,
        "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
      },
      {
        "trust": 1.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:2692"
      },
      {
        "trust": 1.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:2745"
      },
      {
        "trust": 1.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:2746"
      },
      {
        "trust": 1.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:2799"
      },
      {
        "trust": 1.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:2925"
      },
      {
        "trust": 1.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:2949"
      },
      {
        "trust": 1.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:2955"
      },
      {
        "trust": 1.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:2966"
      },
      {
        "trust": 1.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:3041"
      },
      {
        "trust": 1.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:3932"
      },
      {
        "trust": 1.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:3935"
      },
      {
        "trust": 1.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:4018"
      },
      {
        "trust": 1.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:4019"
      },
      {
        "trust": 1.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:4021"
      },
      {
        "trust": 1.1,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html"
      },
      {
        "trust": 1.1,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html"
      },
      {
        "trust": 1.1,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html"
      },
      {
        "trust": 1.1,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00003.html"
      },
      {
        "trust": 1.1,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00005.html"
      },
      {
        "trust": 1.1,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html"
      },
      {
        "trust": 1.1,
        "url": "https://usn.ubuntu.com/4099-1/"
      },
      {
        "trust": 1.0,
        "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=sb10296"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/bp556leg3wenhzi5taq6zebftjb4e2is/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/jubyaf6ed3o4xchq5c2hyenjlxyxzc4m/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/lzluypyy3rx4zjdwzrjiksulyrj4pxw7/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/popaec4fwl4uu4ldegpy5npalu24ffqd/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/tazzevtcn2b4wt6aibj7xgyjmbtorju5/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/xhtku7yq5eep2xnsav4m4vj7qcbojmod/"
      },
      {
        "trust": 1.0,
        "url": "https://support.f5.com/csp/article/k02591030?utm_source=f5support\u0026amp%3butm_medium=rss"
      },
      {
        "trust": 0.9,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9511"
      },
      {
        "trust": 0.8,
        "url": "https://vuls.cert.org/confluence/pages/viewpage.action?pageid=56393752"
      },
      {
        "trust": 0.8,
        "url": "https://tools.ietf.org/html/rfc7540"
      },
      {
        "trust": 0.8,
        "url": "https://tools.ietf.org/html/rfc7541"
      },
      {
        "trust": 0.8,
        "url": "https://blog.cloudflare.com/on-the-recent-http-2-dos-attacks/"
      },
      {
        "trust": 0.8,
        "url": "https://blog.litespeedtech.com/2019/08/15/litespeed-addresses-http-2-dos-advisories/"
      },
      {
        "trust": 0.8,
        "url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9511https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9512https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9513https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9514https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9518"
      },
      {
        "trust": 0.6,
        "url": "https://www.redhat.com/mailman/listinfo/rhsa-announce"
      },
      {
        "trust": 0.6,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9513"
      },
      {
        "trust": 0.6,
        "url": "https://access.redhat.com/security/cve/cve-2019-9511"
      },
      {
        "trust": 0.6,
        "url": "https://bugzilla.redhat.com/):"
      },
      {
        "trust": 0.6,
        "url": "https://access.redhat.com/security/team/contact/"
      },
      {
        "trust": 0.6,
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "trust": 0.5,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9516"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/team/key/"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2019-9516"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/articles/11258"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9514"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2019-9513"
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9515"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2019-9512"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2019-9514"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2019-9515"
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9512"
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9517"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2019-9517"
      },
      {
        "trust": 0.2,
        "url": "https://www.debian.org/security/faq"
      },
      {
        "trust": 0.2,
        "url": "https://www.debian.org/security/"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2019-20444"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-20445"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-20444"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2019-20445"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2020-7238"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2019-9518"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9518"
      },
      {
        "trust": 0.1,
        "url": "https://kc.mcafee.com/corporate/index?page=content\u0026amp;id=sb10296"
      },
      {
        "trust": 0.1,
        "url": "https://support.f5.com/csp/article/k02591030?utm_source=f5support\u0026amp;amp;utm_medium=rss"
      },
      {
        "trust": 0.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/bp556leg3wenhzi5taq6zebftjb4e2is/"
      },
      {
        "trust": 0.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/xhtku7yq5eep2xnsav4m4vj7qcbojmod/"
      },
      {
        "trust": 0.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/popaec4fwl4uu4ldegpy5npalu24ffqd/"
      },
      {
        "trust": 0.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/lzluypyy3rx4zjdwzrjiksulyrj4pxw7/"
      },
      {
        "trust": 0.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/jubyaf6ed3o4xchq5c2hyenjlxyxzc4m/"
      },
      {
        "trust": 0.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/tazzevtcn2b4wt6aibj7xgyjmbtorju5/"
      },
      {
        "trust": 0.1,
        "url": "https://issues.jboss.org/):"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-14843"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-14838"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-14843"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-14838"
      },
      {
        "trust": 0.1,
        "url": "https://security-tracker.debian.org/tracker/nginx"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-16335"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-11797"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-11112"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-11113"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-10968"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-9546"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-14060"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-16943"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-10672"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-17573"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-11619"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-10172"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-10672"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-20330"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-12086"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-1000632"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-1000632"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-12400"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-3831"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-0231"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-20330"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-11797"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-10673"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/jbossnetwork/restricted/listsoftware.html?downloadtype=distributions\u0026product=jboss.fuse\u0026version=7.7.0"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-17531"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-16335"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-10086"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-14062"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-12541"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-3797"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2016-4970"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-17531"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-9827"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-14540"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-17267"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-1745"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-10172"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-12086"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-16942"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-14892"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-4970"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-9548"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-1953"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-1757"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-16943"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-10969"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-11620"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-0231"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-17267"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-14893"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-11111"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9827"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-9547"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-17573"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-16942"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-14893"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-3831"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-14888"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-12400"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-14892"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-14061"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-10086"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-12541"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-14540"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-8840"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2020:3192"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-14195"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-3797"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-14888"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-0222"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-10247"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/jbossnetwork/restricted/listsoftware.html?downloadtype=distributions\u0026product=jboss.amq.broker\u0026version=7.4.3"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-16869"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-0222"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-7238"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2020:1445"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-10241"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-10247"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-16869"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-10241"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/documentation/en-us/red_hat_amq/7.4/"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-0197"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-5407"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-17199"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-17189"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-0737"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-17199"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-0737"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-0217"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-0734"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-0217"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-0197"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-17189"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-5407"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-0196"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-0196"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-0734"
      },
      {
        "trust": 0.1,
        "url": "https://security-tracker.debian.org/tracker/nodejs"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-15606"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-15604"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-15605"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/nghttp2/1.40.0-1ubuntu0.3"
      },
      {
        "trust": 0.1,
        "url": "https://ubuntu.com/security/notices/usn-6754-1"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2023-44487"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/nghttp2/1.43.0-1ubuntu0.2"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/nghttp2/1.55.1-1ubuntu0.2"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2024-28182"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#605641"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160946"
      },
      {
        "db": "PACKETSTORM",
        "id": "154510"
      },
      {
        "db": "PACKETSTORM",
        "id": "155479"
      },
      {
        "db": "PACKETSTORM",
        "id": "154190"
      },
      {
        "db": "PACKETSTORM",
        "id": "158636"
      },
      {
        "db": "PACKETSTORM",
        "id": "157214"
      },
      {
        "db": "PACKETSTORM",
        "id": "155416"
      },
      {
        "db": "PACKETSTORM",
        "id": "154693"
      },
      {
        "db": "PACKETSTORM",
        "id": "168812"
      },
      {
        "db": "PACKETSTORM",
        "id": "178284"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9511"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#605641"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160946"
      },
      {
        "db": "PACKETSTORM",
        "id": "154510"
      },
      {
        "db": "PACKETSTORM",
        "id": "155479"
      },
      {
        "db": "PACKETSTORM",
        "id": "154190"
      },
      {
        "db": "PACKETSTORM",
        "id": "158636"
      },
      {
        "db": "PACKETSTORM",
        "id": "157214"
      },
      {
        "db": "PACKETSTORM",
        "id": "155416"
      },
      {
        "db": "PACKETSTORM",
        "id": "154693"
      },
      {
        "db": "PACKETSTORM",
        "id": "168812"
      },
      {
        "db": "PACKETSTORM",
        "id": "178284"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9511"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-08-13T00:00:00",
        "db": "CERT/CC",
        "id": "VU#605641"
      },
      {
        "date": "2019-08-13T00:00:00",
        "db": "VULHUB",
        "id": "VHN-160946"
      },
      {
        "date": "2019-09-17T20:58:22",
        "db": "PACKETSTORM",
        "id": "154510"
      },
      {
        "date": "2019-11-27T15:37:53",
        "db": "PACKETSTORM",
        "id": "155479"
      },
      {
        "date": "2019-08-22T20:20:23",
        "db": "PACKETSTORM",
        "id": "154190"
      },
      {
        "date": "2020-07-29T00:05:59",
        "db": "PACKETSTORM",
        "id": "158636"
      },
      {
        "date": "2020-04-14T15:39:41",
        "db": "PACKETSTORM",
        "id": "157214"
      },
      {
        "date": "2019-11-20T20:55:55",
        "db": "PACKETSTORM",
        "id": "155416"
      },
      {
        "date": "2019-09-30T22:22:22",
        "db": "PACKETSTORM",
        "id": "154693"
      },
      {
        "date": "2020-04-28T19:12:00",
        "db": "PACKETSTORM",
        "id": "168812"
      },
      {
        "date": "2024-04-26T15:13:40",
        "db": "PACKETSTORM",
        "id": "178284"
      },
      {
        "date": "2019-08-13T21:15:12.223000",
        "db": "NVD",
        "id": "CVE-2019-9511"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-11-19T00:00:00",
        "db": "CERT/CC",
        "id": "VU#605641"
      },
      {
        "date": "2020-10-22T00:00:00",
        "db": "VULHUB",
        "id": "VHN-160946"
      },
      {
        "date": "2023-11-07T03:13:41.610000",
        "db": "NVD",
        "id": "CVE-2019-9511"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "178284"
      }
    ],
    "trust": 0.1
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "HTTP/2 implementations do not robustly handle abnormal traffic and resource exhaustion",
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#605641"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "xss",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "158636"
      },
      {
        "db": "PACKETSTORM",
        "id": "157214"
      }
    ],
    "trust": 0.2
  }
}

{
  "GSD": {
    "alias": "CVE-2019-9511",
    "description": "Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.",
    "id": "GSD-2019-9511",
    "references": [
      "https://www.suse.com/security/cve/CVE-2019-9511.html",
      "https://www.debian.org/security/2020/dsa-4669",
      "https://www.debian.org/security/2019/dsa-4511",
      "https://www.debian.org/security/2019/dsa-4505",
      "https://access.redhat.com/errata/RHSA-2020:3192",
      "https://access.redhat.com/errata/RHSA-2020:2565",
      "https://access.redhat.com/errata/RHSA-2020:2067",
      "https://access.redhat.com/errata/RHSA-2020:1445",
      "https://access.redhat.com/errata/RHSA-2020:0922",
      "https://access.redhat.com/errata/RHSA-2019:4021",
      "https://access.redhat.com/errata/RHSA-2019:4020",
      "https://access.redhat.com/errata/RHSA-2019:4019",
      "https://access.redhat.com/errata/RHSA-2019:4018",
      "https://access.redhat.com/errata/RHSA-2019:3935",
      "https://access.redhat.com/errata/RHSA-2019:3933",
      "https://access.redhat.com/errata/RHSA-2019:3932",
      "https://access.redhat.com/errata/RHSA-2019:3041",
      "https://access.redhat.com/errata/RHSA-2019:2966",
      "https://access.redhat.com/errata/RHSA-2019:2955",
      "https://access.redhat.com/errata/RHSA-2019:2949",
      "https://access.redhat.com/errata/RHSA-2019:2946",
      "https://access.redhat.com/errata/RHSA-2019:2939",
      "https://access.redhat.com/errata/RHSA-2019:2925",
      "https://access.redhat.com/errata/RHSA-2019:2799",
      "https://access.redhat.com/errata/RHSA-2019:2775",
      "https://access.redhat.com/errata/RHSA-2019:2746",
      "https://access.redhat.com/errata/RHSA-2019:2745",
      "https://access.redhat.com/errata/RHSA-2019:2692",
      "https://ubuntu.com/security/CVE-2019-9511",
      "https://advisories.mageia.org/CVE-2019-9511.html",
      "https://security.archlinux.org/CVE-2019-9511",
      "https://alas.aws.amazon.com/cve/html/CVE-2019-9511.html",
      "https://linux.oracle.com/cve/CVE-2019-9511.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2019-9511"
      ],
      "details": "Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.",
      "id": "GSD-2019-9511",
      "modified": "2023-12-13T01:23:47.701344Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "AKA": "HTTP/2 Data Dribble",
        "ASSIGNER": "cert@cert.org",
        "ID": "CVE-2019-9511",
        "STATE": "PUBLIC",
        "TITLE": "Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "credit": [
        {
          "lang": "eng",
          "value": "Thanks to Jonathan Looney of Netflix for reporting this vulnerability."
        }
      ],
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both."
          }
        ]
      },
      "generator": {
        "engine": "Vulnogram 0.0.7"
      },
      "impact": {
        "cvss": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.0"
        }
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "CWE-400 Uncontrolled Resource Consumption"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "VU#605641",
            "refsource": "CERT-VN",
            "url": "https://kb.cert.org/vuls/id/605641/"
          },
          {
            "name": "USN-4099-1",
            "refsource": "UBUNTU",
            "url": "https://usn.ubuntu.com/4099-1/"
          },
          {
            "name": "FEDORA-2019-befd924cfe",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5/"
          },
          {
            "name": "20190822 [SECURITY] [DSA 4505-1] nginx security update",
            "refsource": "BUGTRAQ",
            "url": "https://seclists.org/bugtraq/2019/Aug/40"
          },
          {
            "name": "FEDORA-2019-81985a8858",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZLUYPYY3RX4ZJDWZRJIKSULYRJ4PXW7/"
          },
          {
            "name": "DSA-4505",
            "refsource": "DEBIAN",
            "url": "https://www.debian.org/security/2019/dsa-4505"
          },
          {
            "name": "FEDORA-2019-8a437d5c2f",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JUBYAF6ED3O4XCHQ5C2HYENJLXYXZC4M/"
          },
          {
            "name": "FEDORA-2019-4427fd65be",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BP556LEG3WENHZI5TAQ6ZEBFTJB4E2IS/"
          },
          {
            "name": "FEDORA-2019-63ba15cc83",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XHTKU7YQ5EEP2XNSAV4M4VJ7QCBOJMOD/"
          },
          {
            "name": "20190902 [SECURITY] [DSA 4511-1] nghttp2 security update",
            "refsource": "BUGTRAQ",
            "url": "https://seclists.org/bugtraq/2019/Sep/1"
          },
          {
            "name": "DSA-4511",
            "refsource": "DEBIAN",
            "url": "https://www.debian.org/security/2019/dsa-4511"
          },
          {
            "name": "FEDORA-2019-7a0b45fdc4",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD/"
          },
          {
            "name": "RHSA-2019:2692",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2692"
          },
          {
            "name": "openSUSE-SU-2019:2120",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html"
          },
          {
            "name": "openSUSE-SU-2019:2114",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html"
          },
          {
            "name": "openSUSE-SU-2019:2115",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html"
          },
          {
            "name": "RHSA-2019:2745",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2745"
          },
          {
            "name": "RHSA-2019:2746",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2746"
          },
          {
            "name": "RHSA-2019:2775",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2775"
          },
          {
            "name": "RHSA-2019:2799",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2799"
          },
          {
            "name": "RHSA-2019:2925",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2925"
          },
          {
            "name": "RHSA-2019:2939",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2939"
          },
          {
            "name": "RHSA-2019:2949",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2949"
          },
          {
            "name": "openSUSE-SU-2019:2232",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00003.html"
          },
          {
            "name": "openSUSE-SU-2019:2234",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00005.html"
          },
          {
            "name": "RHSA-2019:2955",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2955"
          },
          {
            "name": "RHSA-2019:2966",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2966"
          },
          {
            "name": "openSUSE-SU-2019:2264",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html"
          },
          {
            "name": "RHSA-2019:3041",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:3041"
          },
          {
            "name": "RHSA-2019:3933",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:3933"
          },
          {
            "name": "RHSA-2019:3935",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:3935"
          },
          {
            "name": "RHSA-2019:3932",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:3932"
          },
          {
            "name": "RHSA-2019:4018",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:4018"
          },
          {
            "name": "RHSA-2019:4019",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:4019"
          },
          {
            "name": "RHSA-2019:4021",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:4021"
          },
          {
            "name": "RHSA-2019:4020",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:4020"
          },
          {
            "name": "DSA-4669",
            "refsource": "DEBIAN",
            "url": "https://www.debian.org/security/2020/dsa-4669"
          },
          {
            "name": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
          },
          {
            "name": "https://www.oracle.com/security-alerts/cpuoct2020.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
          },
          {
            "name": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
            "refsource": "MISC",
            "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
          },
          {
            "name": "https://www.synology.com/security/advisory/Synology_SA_19_33",
            "refsource": "CONFIRM",
            "url": "https://www.synology.com/security/advisory/Synology_SA_19_33"
          },
          {
            "name": "https://support.f5.com/csp/article/K02591030",
            "refsource": "CONFIRM",
            "url": "https://support.f5.com/csp/article/K02591030"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20190823-0002/",
            "refsource": "CONFIRM",
            "url": "https://security.netapp.com/advisory/ntap-20190823-0002/"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20190823-0005/",
            "refsource": "CONFIRM",
            "url": "https://security.netapp.com/advisory/ntap-20190823-0005/"
          },
          {
            "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296",
            "refsource": "CONFIRM",
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296"
          },
          {
            "name": "https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp;utm_medium=RSS",
            "refsource": "CONFIRM",
            "url": "https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp;utm_medium=RSS"
          },
          {
            "name": "https://www.oracle.com/security-alerts/cpujan2021.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/security-alerts/cpujan2021.html"
          }
        ]
      },
      "source": {
        "discovery": "UNKNOWN"
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:a:apple:swiftnio:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndIncluding": "1.4.0",
                    "versionStartIncluding": "1.0.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionStartIncluding": "14.04",
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionStartIncluding": "10.12",
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "8.0.3",
                "versionStartIncluding": "8.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "7.1.6",
                "versionStartIncluding": "7.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "6.2.3",
                "versionStartIncluding": "6.0.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:synology:skynas:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:synology:diskstation_manager:6.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_core_services:1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:quay:3.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:openshift_service_mesh:1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:oracle:graalvm:19.2.0:*:*:*:enterprise:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.7.2.24",
                "versionStartIncluding": "7.7.2.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.8.2.13",
                "versionStartIncluding": "7.8.2.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "8.2.0",
                "versionStartIncluding": "8.1.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "1.16.1",
                "versionStartIncluding": "1.9.5",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "1.17.2",
                "versionStartIncluding": "1.17.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:oracle:enterprise_communications_broker:3.1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:enterprise_communications_broker:3.2.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "8.8.1",
                "versionStartIncluding": "8.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "10.12.0",
                "versionStartIncluding": "10.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "12.8.1",
                "versionStartIncluding": "12.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "10.16.3",
                "versionStartIncluding": "10.13.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "8.16.1",
                "versionStartIncluding": "8.9.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2019-9511"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-770"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "VU#605641",
              "refsource": "CERT-VN",
              "tags": [
                "Third Party Advisory",
                "US Government Resource"
              ],
              "url": "https://kb.cert.org/vuls/id/605641/"
            },
            {
              "name": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
              "refsource": "MISC",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
            },
            {
              "name": "USN-4099-1",
              "refsource": "UBUNTU",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://usn.ubuntu.com/4099-1/"
            },
            {
              "name": "https://www.synology.com/security/advisory/Synology_SA_19_33",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.synology.com/security/advisory/Synology_SA_19_33"
            },
            {
              "name": "https://support.f5.com/csp/article/K02591030",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://support.f5.com/csp/article/K02591030"
            },
            {
              "name": "FEDORA-2019-befd924cfe",
              "refsource": "FEDORA",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5/"
            },
            {
              "name": "20190822 [SECURITY] [DSA 4505-1] nginx security update",
              "refsource": "BUGTRAQ",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://seclists.org/bugtraq/2019/Aug/40"
            },
            {
              "name": "FEDORA-2019-81985a8858",
              "refsource": "FEDORA",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZLUYPYY3RX4ZJDWZRJIKSULYRJ4PXW7/"
            },
            {
              "name": "DSA-4505",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.debian.org/security/2019/dsa-4505"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190823-0005/",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.netapp.com/advisory/ntap-20190823-0005/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190823-0002/",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.netapp.com/advisory/ntap-20190823-0002/"
            },
            {
              "name": "FEDORA-2019-8a437d5c2f",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JUBYAF6ED3O4XCHQ5C2HYENJLXYXZC4M/"
            },
            {
              "name": "FEDORA-2019-4427fd65be",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BP556LEG3WENHZI5TAQ6ZEBFTJB4E2IS/"
            },
            {
              "name": "FEDORA-2019-63ba15cc83",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XHTKU7YQ5EEP2XNSAV4M4VJ7QCBOJMOD/"
            },
            {
              "name": "20190902 [SECURITY] [DSA 4511-1] nghttp2 security update",
              "refsource": "BUGTRAQ",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://seclists.org/bugtraq/2019/Sep/1"
            },
            {
              "name": "DSA-4511",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.debian.org/security/2019/dsa-4511"
            },
            {
              "name": "FEDORA-2019-7a0b45fdc4",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD/"
            },
            {
              "name": "RHSA-2019:2692",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2692"
            },
            {
              "name": "openSUSE-SU-2019:2120",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html"
            },
            {
              "name": "openSUSE-SU-2019:2114",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html"
            },
            {
              "name": "openSUSE-SU-2019:2115",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296"
            },
            {
              "name": "RHSA-2019:2746",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2746"
            },
            {
              "name": "RHSA-2019:2745",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2745"
            },
            {
              "name": "RHSA-2019:2775",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2775"
            },
            {
              "name": "RHSA-2019:2799",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2799"
            },
            {
              "name": "RHSA-2019:2925",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2925"
            },
            {
              "name": "RHSA-2019:2939",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2939"
            },
            {
              "name": "RHSA-2019:2949",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2949"
            },
            {
              "name": "openSUSE-SU-2019:2232",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00003.html"
            },
            {
              "name": "openSUSE-SU-2019:2234",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00005.html"
            },
            {
              "name": "RHSA-2019:2955",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2955"
            },
            {
              "name": "RHSA-2019:2966",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2966"
            },
            {
              "name": "openSUSE-SU-2019:2264",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html"
            },
            {
              "name": "https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp;utm_medium=RSS",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp;utm_medium=RSS"
            },
            {
              "name": "RHSA-2019:3041",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:3041"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
              "refsource": "MISC",
              "tags": [
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
            },
            {
              "name": "RHSA-2019:3935",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:3935"
            },
            {
              "name": "RHSA-2019:3933",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:3933"
            },
            {
              "name": "RHSA-2019:3932",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:3932"
            },
            {
              "name": "RHSA-2019:4018",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:4018"
            },
            {
              "name": "RHSA-2019:4019",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:4019"
            },
            {
              "name": "RHSA-2019:4021",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:4021"
            },
            {
              "name": "RHSA-2019:4020",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:4020"
            },
            {
              "name": "DSA-4669",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.debian.org/security/2020/dsa-4669"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuoct2020.html",
              "refsource": "MISC",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujan2021.html",
              "refsource": "MISC",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.oracle.com/security-alerts/cpujan2021.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2022-08-12T18:43Z",
      "publishedDate": "2019-08-13T21:15Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "nginx ist eine modular aufgebaute Webserver-Software, welche durch verschiedene Module Funktionalit\u00e4ten wie Reverse- oder Email-Proxy unterst\u00fctzt. Nginx wird unter der BSD-Lizenz vertrieben.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in nginx ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- UNIX",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-1050 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2019/wid-sec-w-2024-1050.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-1050 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1050"
      },
      {
        "category": "external",
        "summary": "NGINX Security Advisory vom 2019-08-14",
        "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-4099-1 vom 2019-08-16",
        "url": "https://usn.ubuntu.com/4099-1/"
      },
      {
        "category": "external",
        "summary": "Arch Linux Security Advisory ASA-201908-12 vom 2019-08-17",
        "url": "https://security.archlinux.org/ASA-201908-12"
      },
      {
        "category": "external",
        "summary": "Arch Linux Security Advisory ASA-201908-13 vom 2019-08-17",
        "url": "https://security.archlinux.org/ASA-201908-13"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-4505 vom 2019-08-23",
        "url": "http://www.debian.org/security/2019/dsa-4505"
      },
      {
        "category": "external",
        "summary": "Arch Linux Security Advisory ASA-201908-17 vom 2019-08-27",
        "url": "https://security.archlinux.org/ASA-201908-17"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-4511 vom 2019-09-02",
        "url": "https://www.debian.org/security/2019/dsa-4511"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2019:2309-1 vom 2019-09-06",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192309-1.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2692 vom 2019-09-10",
        "url": "https://access.redhat.com/errata/RHSA-2019:2692"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2019-2692 vom 2019-09-11",
        "url": "http://linux.oracle.com/errata/ELSA-2019-2692.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2746 vom 2019-09-12",
        "url": "https://access.redhat.com/errata/RHSA-2019:2746"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2745 vom 2019-09-12",
        "url": "https://access.redhat.com/errata/RHSA-2019:2745"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2775 vom 2019-09-17",
        "url": "https://access.redhat.com/errata/RHSA-2019:2775"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2799-01 vom 2019-09-17",
        "url": "https://access.redhat.com/errata/RHSA-2019:2799"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Errata ELSA-2019-2799 vom 2019-09-19",
        "url": "https://linux.oracle.com/errata/ELSA-2019-2799.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2019:2473-1 vom 2019-09-26",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192473-1.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2925 vom 2019-09-30",
        "url": "https://access.redhat.com/errata/RHSA-2019:2925"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2939 vom 2019-10-01",
        "url": "https://access.redhat.com/errata/RHSA-2019:2939"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2946 vom 2019-10-01",
        "url": "https://access.redhat.com/errata/RHSA-2019:2946"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2950 vom 2019-10-01",
        "url": "https://access.redhat.com/errata/RHSA-2019:2950"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2949 vom 2019-10-01",
        "url": "https://access.redhat.com/errata/RHSA-2019:2949"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2966 vom 2019-10-03",
        "url": "https://access.redhat.com/errata/RHSA-2019:2966"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2955 vom 2019-10-02",
        "url": "https://access.redhat.com/errata/RHSA-2019:2955"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2019:2559-1 vom 2019-10-04",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192559-1.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:3041 vom 2019-10-14",
        "url": "https://access.redhat.com/errata/RHSA-2019:3041"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:3933 vom 2019-11-20",
        "url": "https://access.redhat.com/errata/RHSA-2019:3933"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:3935 vom 2019-11-20",
        "url": "https://access.redhat.com/errata/RHSA-2019:3935"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:3932 vom 2019-11-20",
        "url": "https://access.redhat.com/errata/RHSA-2019:3932"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:4018 vom 2019-11-26",
        "url": "https://access.redhat.com/errata/RHSA-2019:4018"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:4019 vom 2019-11-26",
        "url": "https://access.redhat.com/errata/RHSA-2019:4019"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:4021 vom 2019-11-26",
        "url": "https://access.redhat.com/errata/RHSA-2019:4021"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:4020 vom 2019-11-28",
        "url": "https://access.redhat.com/errata/RHSA-2019:4020"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2020:0922 vom 2020-03-23",
        "url": "https://access.redhat.com/errata/RHSA-2020:0922"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2020:0983 vom 2020-03-26",
        "url": "https://access.redhat.com/errata/RHSA-2020:0983"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2020:1445 vom 2020-04-14",
        "url": "https://access.redhat.com/errata/RHSA-2020:1445"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-4669 vom 2020-04-30",
        "url": "https://www.debian.org/security/2020/dsa-4669"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2020:2067 vom 2020-05-18",
        "url": "https://access.redhat.com/errata/RHSA-2020:2067"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:0932-1 vom 2021-03-24",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-March/008541.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2020:3192 vom 2020-07-28",
        "url": "https://access.redhat.com/errata/RHSA-2020:3192"
      },
      {
        "category": "external",
        "summary": "Juniper Security Advisory JSA11167 vom 2021-04-16",
        "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11167"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2020-5495 vom 2020-12-18",
        "url": "https://linux.oracle.com/errata/ELSA-2020-5495.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6754-2 vom 2024-05-07",
        "url": "https://ubuntu.com/security/notices/USN-6754-2"
      }
    ],
    "source_lang": "en-US",
    "title": "nginx: Mehrere Schwachstellen erm\u00f6glichen Denial of Service",
    "tracking": {
      "current_release_date": "2024-05-07T22:00:00.000+00:00",
      "generator": {
        "date": "2024-05-08T08:11:09.301+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.0"
        }
      },
      "id": "WID-SEC-W-2024-1050",
      "initial_release_date": "2019-08-14T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2019-08-14T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2019-08-15T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2019-08-18T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Arch Linux und Fedora aufgenommen"
        },
        {
          "date": "2019-08-19T22:00:00.000+00:00",
          "number": "4",
          "summary": "Referenz(en) aufgenommen: FEDORA-2019-63BA15CC83, FEDORA-2019-8A437D5C2F, FEDORA-2019-4427FD65BE"
        },
        {
          "date": "2019-08-22T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2019-08-27T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Arch Linux und Fedora aufgenommen"
        },
        {
          "date": "2019-09-02T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2019-09-05T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2019-09-09T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-09-10T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2019-09-12T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-09-17T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-09-18T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-09-19T22:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2019-09-26T22:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2019-09-29T22:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-09-30T22:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-09-30T22:00:00.000+00:00",
          "number": "18",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2019-10-01T22:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-10-03T22:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-10-06T22:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2019-10-14T22:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-11-20T23:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-11-26T23:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-11-27T23:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2020-03-22T23:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2020-03-26T23:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2020-04-14T22:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2020-04-29T22:00:00.000+00:00",
          "number": "29",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2020-05-17T22:00:00.000+00:00",
          "number": "30",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2020-07-28T22:00:00.000+00:00",
          "number": "31",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2020-12-17T23:00:00.000+00:00",
          "number": "32",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2021-03-24T23:00:00.000+00:00",
          "number": "33",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2021-04-15T22:00:00.000+00:00",
          "number": "34",
          "summary": "Neue Updates von Juniper aufgenommen"
        },
        {
          "date": "2024-05-07T22:00:00.000+00:00",
          "number": "35",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        }
      ],
      "status": "final",
      "version": "35"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Juniper JUNOS",
            "product": {
              "name": "Juniper JUNOS",
              "product_id": "5930",
              "product_identification_helper": {
                "cpe": "cpe:/o:juniper:junos:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Juniper"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c1.16.1",
                "product": {
                  "name": "Open Source nginx \u003c1.16.1",
                  "product_id": "T014853",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:nginx:nginx:1.16.1"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c1.17.3",
                "product": {
                  "name": "Open Source nginx \u003c1.17.3",
                  "product_id": "T014854",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:nginx:nginx:1.17.3"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cPlus R18 P1",
                "product": {
                  "name": "Open Source nginx \u003cPlus R18 P1",
                  "product_id": "T014855",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:nginx:nginx:plus_r18_p1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "NGINX"
          }
        ],
        "category": "vendor",
        "name": "NGINX"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Open Source Arch Linux",
            "product": {
              "name": "Open Source Arch Linux",
              "product_id": "T013312",
              "product_identification_helper": {
                "cpe": "cpe:/o:archlinux:archlinux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "notes": [
        {
          "category": "description",
          "text": "In nginx existieren mehrere Schwachstellen. Diese befinden sich in der HTTP/2 Implementierung. Sie beruht auf Fehlern bei der Verarbeitung von ungew\u00f6hnlich gestalteten Requests. Ein Angreifer kann dieses durch \u00dcbermittlung geeignet gestalteter Daten zu einem Denial of Service Angriff nutzen."
        }
      ],
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T013312",
          "5930",
          "T004914"
        ]
      },
      "release_date": "2019-08-14T22:00:00Z",
      "title": "CVE-2019-9511"
    },
    {
      "cve": "CVE-2019-9513",
      "notes": [
        {
          "category": "description",
          "text": "In nginx existieren mehrere Schwachstellen. Diese befinden sich in der HTTP/2 Implementierung. Sie beruht auf Fehlern bei der Verarbeitung von ungew\u00f6hnlich gestalteten Requests. Ein Angreifer kann dieses durch \u00dcbermittlung geeignet gestalteter Daten zu einem Denial of Service Angriff nutzen."
        }
      ],
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T013312",
          "5930",
          "T004914"
        ]
      },
      "release_date": "2019-08-14T22:00:00Z",
      "title": "CVE-2019-9513"
    },
    {
      "cve": "CVE-2019-9516",
      "notes": [
        {
          "category": "description",
          "text": "In nginx existieren mehrere Schwachstellen. Diese befinden sich in der HTTP/2 Implementierung. Sie beruht auf Fehlern bei der Verarbeitung von ungew\u00f6hnlich gestalteten Requests. Ein Angreifer kann dieses durch \u00dcbermittlung geeignet gestalteter Daten zu einem Denial of Service Angriff nutzen."
        }
      ],
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T013312",
          "5930",
          "T004914"
        ]
      },
      "release_date": "2019-08-14T22:00:00Z",
      "title": "CVE-2019-9516"
    }
  ]
}